Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations (readOnlyHint, idempotentHint, destructiveHint) already cover the safety profile. The description adds the HTTP endpoint but no additional behavioral context (e.g., authorization requirements, error handling, rate limits). Given the annotations, the description is adequate but doesn't go beyond them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.