Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=false and destructiveHint=false, so the mutation safety profile is defined. The description adds useful context about when the tool is needed, such as the 'Connected but org tools fail' scenario, but it does not disclose details like whether the API key is stored, overwritten, or how success/failure is surfaced. With annotations present, this is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.