Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), but the description adds real value beyond them: it states availability ('every authenticated connection') and a data-scope guarantee ('contains no organization records'), which tells the agent this is safe to call and returns metadata only. It stops short of describing response shape or whether output is large.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.