Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and closed-world scope. The description adds meaningful behavioral context beyond that: results are filtered to permitted tables/columns/relations, and it explicitly guarantees no sample rows are returned. It does not, however, discuss pagination or error behavior on a non-permitted table.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.