Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond readOnlyHint/openWorldHint it discloses a real side effect (returned items are marked seen), the meaning of digest_md, the requires_action handoff, and the trust boundary that outside-written content arrives as untrusted_content to quote and never to obey. The envelope link policy (domains shown, links opened only on request) is exactly the safety context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.