Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry readOnly, idempotent, and non-destructive hints. The description adds useful behavioral context beyond that: the read does not claim inbox work, access is restricted by mailbox policy and blocks, and pending tasks have no response yet. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.