Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true, destructiveHint=false, and openWorldHint=true, so safety is covered. The description adds genuinely new behavioral context: restricted services demand fresh server-verified access and will refuse otherwise, and no writes or access grants occur. It stops short of defining what 'restricted' or 'fresh' mean, but it clears the lower bar set by the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.