Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as read-only and idempotent, and the description adds meaningful state-dependent behavior: when all providers are connected it returns authenticated:true and empty pending[], and when credentials are missing it returns connect_url for the toolkit and per-install URLs. This goes beyond the annotations, though partial connection states are left ambiguous.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.