Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already signals a safe read operation. The description adds valuable behavioral context by defining the four access levels (closed, visitor, user, server) and stating that the data is read from role grants 'exactly as the gateway sees them.' This clarifies both the source and the freshness semantics, which goes beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.