Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/non-destructive/closed-world, and the description adds real context on top: it discloses the exact read scope (name and email) and explicitly bounds what is not exposed (private passages, saved words), which matters for an agent reasoning about data exposure. It stops short of describing failure behavior when no account is connected.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.