Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnlyHint=false, idempotentHint=true, destructiveHint=false), so the bar is lower. The description adds genuinely new behavioral context by stating the call requires a write toggle and a schema lock, which is an operational prerequisite not present in the annotations. It does not cover failure modes, but the added prerequisite is meaningful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.