Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/openWorld annotations by disclosing pagination behavior (first page reports total hit count, final marks the last page, limit 1-100 default 20, offset window) and the empty-result contract, which is exactly the kind of response-shape context an agent needs to loop over pages correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.