Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/closed-world, but the description adds genuinely new behavioral context: a shared HTTP endpoint without per-caller auth only permits nameless listing where each MCP session owns a workspace, and never for a sessionless request. That access-control nuance is real value, though the sentence is dense enough to be hard to parse on first read.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.