Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry the full safety profile (readOnly, idempotent, non-destructive, closed-world), so the bar is lower. The description does add real value by disclosing data scope — metadata/approved fields only, excluding secrets, contacts and original files — which is information the annotations cannot convey. It says nothing, however, about result granularity, pagination behavior, or whether trend data is pre-aggregated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.