Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), yet the description still adds substantive context: the password is never returned, ai_permissions defines the AI's allowed write scope and that out-of-scope tools are refused, indexed_at has a 15-minute refresh window with newer mail unsearchable, and sync_errors is conditionally present. These are non-obvious behaviors an agent cannot get from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.