Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already establish read-only, idempotent, non-destructive behavior, but the description adds substantive context: the call behaves exactly like calling the underlying tool directly, uses the same permissions, and refuses all write or spend tools. It also frames this as a dispatcher rather than a normal read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.