Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint, idempotent, non-destructive, closed-world), so the bar is lower. The description adds a real operational fact beyond them: the call requires the launches:write scope, which an agent must have provisioned before invoking. The apparent tension between a read-only tool and a write scope is worth noting but describes API permissions rather than mutating behavior, so it is not an annotation contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.