Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, and non-destructive, so the bar is lower; the description still adds real context by noting the results are scoped to what 'this connection can see' (permission boundary) and that counts come back with status. It does not mention pagination or result-size limits, keeping it out of 5 territory.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.