Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idiompotent/non-destructive, but the description adds value beyond them: it discloses that this is a UI render surface in MCP Apps hosts, that calling it redundantly duplicates cards, and that it never publishes, schedules, or enables a public link. It does not describe what the rendered card contains or any host-specific failure modes, so it falls short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.