Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=false), so the bar is lower; the description goes beyond them by disclosing a non-obvious server-side side effect — memberNpcEntryIds are projected into MEMBER relationships — plus the GM/co-GM auth requirement. It stops short of covering failure modes, visibility defaults, or the 50-item batch limit, so not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.