Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/openWorld=false, so safety is covered. The description goes beyond them by disclosing pagination behavior ('50 by default and 100 at most, with a flag when more exist') and the fact that returned identifiers are needed to select a project, which is real operational context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.