Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the annotations (which already say readOnly, non-destructive, closed-world) by disclosing counting semantics ('activity is counted at most once a minute, so this is sessions-ish, not page views'), the meaning of a missing first_opened, the domain-row/`via` row structure, and the public-project coverage gap. These are exactly the behavioral traits an agent cannot get from structured fields and would otherwise misreport.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.