Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=false and idempotentHint=true, so the additive semantics is partly covered; the description's restatement adds mild confirmation rather than new information. It says nothing about batch failure behavior (e.g. whether an invalid ID aborts the whole attach), permission requirements, or the effect on entities not listed. For a mutation tool with annotation coverage, a 3 fits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.