Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint=false, and openWorldHint=false, but the description adds real context beyond them: 'No writes or access grants' reaffirms the read-only surface, and the statement that restricted services require fresh server-verified access and otherwise refuse discloses an auth/refusal behavior. The auth detail is somewhat vague ('restricted services', 'fresh server-verified'), keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.