Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the tool read-only and idempotent, and the description adds behavioral specifics: it reveals that the tool outputs authenticated:true and empty pending[] when connected, and connect_url and per-install URLs when credentials are missing. This goes beyond the safety profile, providing concrete return semantics without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.