Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true and destructiveHint=false, so the safety profile is covered. The description adds real domain behavior on top: counts include contact-level assignments, and ai_send_block labels block sends while remaining readable, while ai_protected labels are human-managed and immutable via update_labels. The only missing behavioral detail is pagination (limit/cursor) and result ordering.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.