Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint true, idempotentHint true, and destructiveHint false, covering the safety profile. The description adds meaningful behavioral detail about the output: the whole tree is returned, nested, with per-folder app counts and top-level count, and each node carries updated_at. This goes beyond the annotations and gives the agent a concrete picture of what the call returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.