Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnlyHint, idempotentHint, destructiveHint=false, openWorldHint), so the bar is lower. The description does add real context beyond them: the call is validated, limited (quota/rate implied), billed, and returned identically to a direct tool call. It does not say what happens on an invalid or unknown tool name, or how validation failures are surfaced.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.