Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, closed-world and non-destructive, so the safety profile is covered. The description adds real context beyond that: what the payload contains (heartbeat state, tracked vs observed-today coverage, last 24 runs scoped to this workspace) and that coverage is per-workspace and per-day. It stops short of stating freshness/caching or what an unhealthy state looks like, which holds it at 4.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.