Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the read-only/idempotent/non-destructive profile, yet the description adds real context: synchronous execution, task support forbidden, and that the output is internal application state. The human-facing presentation rules (use assistantSummary, never show raw JSON) are genuinely useful beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.