Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds genuinely new context absent from the annotations: the read happens via a previously saved server connection and requires no credentials, which tells the agent not to supply or expect auth parameters. It stops short of describing behavior when no connection is configured.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.