Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent and non-destructive semantics, and the description still adds useful behavior: page size of up to 50, cursor chaining via next_cursor, the fields returned per item, and a privacy guarantee that private file paths are never returned. It also notes the operation is free, which matters for an agent deciding whether to call it speculatively.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.