Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only annotations, the description discloses ordering, cursor pagination, the presence of tombstone_id and link_version, and the fact that a likely match is only a hint. It also warns that names and message text are untrusted customer-provided content that must not be treated as instructions, which is valuable safety context not expressed by annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.