Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so safety is covered. The description adds real behavioral context beyond that: the 92-day maximum window, that results are aggregate counts with no message text, and that output is filtered by the organization's AI access and privacy settings, so team phone numbers may be hidden. That last point is valuable because it explains missing or anonymized fields the agent might otherwise treat as an error.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.