Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (readOnlyHint, idempotentHint, openWorldHint=false). It discloses PII masking rules, the required crm:read_pii privilege and that it's granted separately, workspace scoping with a not_found cross-workspace behavior, and the required scope crm:read. These are crucial behavioral details the agent cannot infer from structured fields. Annotations already cover the safety profile, but this adds substantial value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.