Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey read-only, idempotent, non-destructive behavior, lowering the bar. The description adds useful behavioral details: 'newest first, each row tagged with its card' and the existence of gated views. It does not discuss permissions or rate limits, but the annotation set covers the safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.