Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, non-destructive and closed-world. The description adds genuinely new behavioral context — it reads only the *public* view and never returns email addresses or private details, which materially affects how an agent should present results and what it may promise the user. No error or invalid-link behavior is described, so 4.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.