Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden; it does state 'Read-only', which is a genuine safety disclosure, and hints at return contents (recordings URL, duration). It says nothing about pagination, message ordering, or result size limits — meaningful gaps for a message-history tool that can return large volumes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.