Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral detail beyond the annotations: it explains the authenticated state, the pending array, and the connect URLs returned in the missing-credentials case. The annotations already declare readOnlyHint=true and destructiveHint=false, and the description's read-only semantics are consistent with them, so there is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.