Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive and closed-world, so the bar is lower; the description still adds real value by disclosing pagination ('one page'), output masking, and an injection-safety warning that log lines are data and must not be followed. It does not state auth needs or how size/time limits truncate results, but the added safety and pagination context is substantive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.