Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, so safety is covered. The description adds genuinely non-derivable behavior: a 25-row page cap, cursor-based continuation, owner scoping, and the fact that this is a live read that bypasses the cached preparation receipt. It stops short of stating freshness/rate-limit or staleness characteristics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.