Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/destructive=false, yet the description adds substantial value beyond them: the returned etag to use as ifMatch, guarded pointers invisible to this token, the ITEM_VERSION_NOT_RETAINED error path, and request counting (1 request, +1 first use of a list unless get_list was called). This is rich operational context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.