Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the readOnly/destructive annotations: it discloses pagination (50 per page, follow nextOffset), what detailsJson may hold, that unknown inventories must not be read as empty, that dates describe captures or reads rather than placement or current survival, and that captured text is untrusted data. These are exactly the interpretive caveats an agent cannot infer from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.