Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world, so the safety profile is covered. The description adds real behavioral context beyond that: it runs an Azure OpenAI call inside the server, makes no bus-details calls, tolerates an empty line, and only re-fetches the route when the search_context handoff is absent. It does not mention latency, token cost, or failure behavior of the LLM call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.