Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses the up-to-5 cap, that input is trimmed, duplicates and the business name itself are dropped, that an empty list resets to name-only, and that the effect reaches past answers. This is rich behavioral context the readOnly/idempotent/destructive hints alone do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.