Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive, closed-world), the description discloses critical behavioral traits: the lists are capped at 20 actions and the latest 20 reminders, they are explicitly not exhaustive, and open_maintenance_count is called out as the authoritative open-maintenance total. This truncation/authority disclosure is exactly the kind of context an agent needs to avoid misreading partial results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.