Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint=false, idempotentHint=true, destructiveHint=false), lowering the bar. The description does add real value by framing this as a 'request' (cooperative, not guaranteed immediate) and by restricting scope to runs owned by this server instance, but it says nothing about what state the run ends in or what the caller should do afterward.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.