Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (not read-only, non-destructive, idempotent), so the bar is lower; the description still adds real behavior beyond them, notably that 'kept' removes the item from the unread count and retains it for a year, and that acting via the suggested tool implicitly resolves. It does not cover auth/permission requirements or partial-failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.