Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, and the description adds substantial behavioral context beyond them: bounded pages, exact project filtering, the exclusion of full URLs/secrets/ownership fields, and the 20-consecutive-failures disable rule. This materially helps an agent understand side effects and data exposure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.