Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the full safety profile (readOnly, idempotent, non-destructive, closed-world), so the description is only lightly additive. It does add genuinely useful context beyond the annotations: the data is static with no network access, and the registry includes unverified entries and notes, which warns the agent that not all rows are authoritative.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.