Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), so the description's real contribution is the account scoping constraint and the conn_id stability semantics — non-obvious behavior an agent would otherwise have to discover empirically. It says nothing about ordering or whether the window is time-bounded, which is the remaining behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.