Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial context beyond the readOnly/destructive hints: the status vocabulary (recorded, empty, unknown, not_indexed, unavailable), null semantics for unknown totals, the 50-item page cap, the fact that observation IDs are index-scoped and require rediscovery after reindexing, plus an explicit untrusted-data warning against prompt injection from item names.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.