Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered, but the description adds real behavioral context beyond that: exact-word matching with no stemming, best-match ordering, and the notable exclusion of messages held by the security scan. It does not describe pagination or how the limit interacts with results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.