Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Read-only, idempotent, non-destructive, closed-world are already declared by annotations, so the bar is lower. The description goes beyond them by disclosing ordering (Building Check Framework, Substructure to Environmental), pagination semantics (nextCursor) and the shape of returned data, including side payloads like framework sections and the severity scale that an agent would not otherwise anticipate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.