Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnlyHint/openWorldHint annotations: discloses that scanning is passive and possibly stale, explains the seen=false/known=false return for missing records and warns that is not proof of closure. Also discloses the pricing model ($0.002 USDC via x402, failed calls free), which is critical for an agent deciding whether to call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.