Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety (readOnly, idempotent, closed-world), and the description adds substantial behavior beyond that: search order ('labels, keys and tabs before scanning'), what is returned ('exact saved evidence, unknown/missing counts and pagination'), exclusions ('masked fields and restricted records are excluded'), and pagination contract ('Honor complete/hasMore').
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.