Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive, non-open-world, so the safety profile is covered. The description still adds valuable behavioral context: the response is scoped to 'this grant', the timezone is included, and — crucially — that permissions do not auto-widen and require explicit reconnection. That last point is a policy behavior not derivable from annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.