Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world. Beyond that, the description adds two genuinely behavioral facts: missing metrics are unknown rather than zero, and the call does not trigger paid refreshes. These go past the safety profile and affect how an agent interprets results and whether it should worry about cost.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.