Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld), and the description adds genuinely new context beyond them: archive rows are reconstructed from archived pages and are never live observations, plus the free-tier result cap of three rows. These are real behavioral caveats an agent needs. It stops short of describing freshness or how the tier limit is surfaced in the response.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.