Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true and openWorldHint=false, and the tool title repeats 'Read-Only', so the description's 'read-only' framing adds no new safety information. It also omits practical behaviors an agent would want: row/result limits, timeout, cost, and whether queries can be rejected — no value beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.