Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide strong behavioral hints: readOnlyHint=true, idempotentHint=true, destructiveHint=false, openWorldHint=false. The description adds contextual behavior like what the return values mean (pending[] array, connect_url) and the conditional nature based on connection state. It doesn't contradict annotations. With annotations covering the safety profile, a 3 is appropriate as the description adds useful state-dependent behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.