Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive and closed-world behavior, so the bar is low. The description still adds real value by warning that the result is static directory metadata rather than live availability, preventing an agent from treating it as a freshness source; it says nothing about behavior for an unknown or malformed ID.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.