Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/destructive, but the description adds auth context beyond them: 'Pure read, no org / plan gate', which tells the agent no entitlement check blocks the call. Minor gap: the annotation title advertises 'recent dispatch metadata' that the description never mentions or explains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.