Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld and non-destructive, so safety is covered. The description adds real value beyond that: it discloses the returned payload scope (live-observed vs source-attributed schemas, resources, prompts, package definitions, provenance, sanitized maintenance events), which tells the agent how rich and how trustworthy the record will be.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.