Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive, so the bar is lower; the description still adds real context such as 'synchronous' execution, 'task support: forbidden', and 'no publication authority', plus explicit output-handling rules (use assistantSummary first, never dump raw JSON, mention IDs only when useful). This is meaningful behavioral guidance beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.