Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, openWorldHint and destructiveHint=false, so the safety profile is covered. The description adds one genuine behavioral fact the annotations do not: results are permission-gated by the token, which tells the agent to expect partial or empty results rather than an error. It does not disclose what includeDeleted does or how permission failures manifest.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.