Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, openWorldHint and destructiveHint=false, so the safety profile is covered by structured data. The description adds a useful behavioral detail beyond that — results are ordered by arrival and scoped to a single route — but says nothing about failure modes, unknown ids, or result size, which is the expected baseline when annotations carry the safety burden.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.