Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false, destructiveHint=false and idempotentHint=false, but the description adds real substance: the 2000-row cap, the phone/email matching key, and the delta fields the preview returns. It stops short of clarifying that the non-read-only behavior is session creation (the preview does not mutate accounts), which is the one ambiguity an agent might trip on.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.