Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this a safe, idempotent read, so the safety bar is low. The description still adds real context: it is an 'authorized' read with an access precondition, and the warning that 'a handoff receipt is not proof of provider completion' tells the agent how to interpret returned evidence. It does not cover pagination behavior, though the schema's cursor/limit params do.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.