Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, non-destructive, and closed-world; the description adds that only persisted data is returned (no live provider call) and that history is cursor-paginated, which is meaningful behavioral context beyond the annotations. It stops short of describing auth/ownership failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.