Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnly/idempotent/destructive), the description discloses no network, no side effects, safe to call repeatedly, and explains that validation errors are returned in the result rather than as schema rejections. It also defines the semantics of findings (code/message/fix), warnings (advisory), and info notes, which is exactly the behavioral context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.