Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false. The description adds valuable behavioral context beyond those annotations: it is bounded, resumable via cursor, and safe for MCP use without holding long-lived streams. It does not go into rate limits or output format, but the annotations and output schema cover most safety and result structure needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.