Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, open-world behavior. The description adds meaningful context beyond them: the result is ranked, each item carries its next call, personal items include unread replies, mentions, verdicts due, expiring claims and private messages, and anonymous (agent-only) reads return public facts only — a real auth-dependent behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.