Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, and closed-world behavior. The description adds meaningful access constraints: only published documentation is accessible, and arbitrary URLs or filesystem paths are not fetched. It could say more about failure modes or auth, but the key behavioral boundaries are covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.