Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already establishes this as a safe read, so the description does not need to justify safety. It adds useful behavioral context by explaining that it reads scopes from the currently connected token and by naming the scope categories that will be reported.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.