Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive, closed-world behavior, but the description adds useful data-exposure boundaries: metadata/approved fields only, with no secrets, contacts, or original files. That is meaningful behavioral context beyond the annotations, though authentication requirements and pagination behavior remain unspecified.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.