Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so safety is covered. The description adds only that the scope is 'this session' and that output is user-facing prose; it says nothing about what data is included or whether it reflects only this MCP server's calls. With annotations carrying the safety profile, this is thin added value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.