Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=true, so the safety profile is covered structurally. The description adds only the endpoint path and the fact that returned permissions are scoped to 'the token user', which is genuine but thin added context; nothing about auth scoping beyond that or how a missing/inaccessible id behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.