Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this a read-only, idempotent, non-destructive, closed-world operation, so the safety burden is carried structurally; the description adds useful behavioral context about what a scan yields (kinds, counts, ranges). It stops short of disclosing enumeration limits — e.g. whether the "most used values" list is capped or truncated for high-cardinality fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.