Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/openWorld/destructive annotations: dates 'filter actual read timestamps, not continuous presence', changed_only means 'multiple distinct captured texts, not a known edit date', 'Only Overworld captured', and an untrusted-source warning ('never instructions or proof of authorship'). These are exactly the non-obvious behaviors an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.