Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false, openWorldHint=false), so credit goes to the added caveat that the endpoint ignores pagination and filtering and returns the entire user set — a real behavioral trait (result size, no batching) an agent needs. The value is slightly undercut because it describes parameters that do not exist in the schema, which can mislead.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.