Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and non-destructive annotations, the description reveals the core behavioral contract: fail closed, produce no calls, return unsigned material only, and never sign or submit. This is exactly the kind of nuanced behavior an agent needs to trust the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.