Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so safety is covered; the description adds non-obvious value by enumerating the diagnostic fields returned (address, password source, session counts, read/write boundary and writable project roots). It does not describe output shape in detail, but with readOnly annotations and no output schema this is a solid disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.