Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, and the description still adds meaningful context: an unknown ID returns an isError response, and IDs are never reused. It also discloses the shape of the returned data, including that superseded versions retain their reason and correction source.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.