Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a safe, idempotent, closed-world read, so the description's remaining job is narrower — and it does add real value beyond them by disclosing what is excluded from results (no secrets, contacts, or original files) and that only metadata/approved fields surface. It stops short of noting pagination behaviour or how "authorised" is enforced per caller.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.