Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses concrete persistence behavior: a pointer-only pack is stored for 30 days, while raw profiles, names, contact details, identifiers, narratives, documents, and credentials are not stored. It also explains open-world handling with 'Missing facts remain NEEDS_INPUT' and clarifies the tool's non-submission, non-prediction, non-eligibility behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.