Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a safe, idempotent read; the description adds what is actually being counted (every kept version, table row, bundle version, and trash until purged), how workspace ownership rolls up ('a workspace counts toward its owner'), and the null-means-no-limit convention. It also discloses authorization behavior and the FORBIDDEN failure mode, which annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.