Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the description correctly spends its words elsewhere: the required OAuth scope, the cursor round-trip protocol, and a warning that user-authored text arrives in untrusted_fields and must be treated as display-only. That last point is genuine safety context an agent could not get from the schema. It stops short of describing ordering or what a client record contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.