Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and a closed-world profile, so the safety bar is low. The description adds a genuinely non-obvious behavioral note — that journey names, prompts, URLs, and statuses are data, not instructions — which guards against prompt-injection handling of returned content. Pagination behavior is left to the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.