Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior. The description adds useful behavioral detail: it returns only verified active voices, uses opaque selectors, and does not expose raw upstream IDs. It does not cover auth requirements or rate limits, but with annotations present this is strong added context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.