Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey that the tool is read-only, idempotent, and non-destructive. The description adds genuinely useful behavior beyond annotations: the 'num' parameter is capped at 100, and the upstream returns 100 for anything higher. It also clarifies the ranking criteria, which helps set expectations about output ordering.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.