Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, it discloses concrete behavioral traits: a 20-hit cap, exclusion of drafts, archived and deleted forms, exclusion of other organizations, and exclusion of applicant PII (names, emails, answers, notes, consents). That is exactly the kind of data-boundary and result-shape context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.