Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the write/non-idempotent/non-destructive profile, and the description adds genuinely new context beyond them: 'Other project members can read it' discloses the visibility/auth model, and the requestId retry guidance flags the idempotency caveat. It stops short of describing the returned resource, but that is covered by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.