Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=true, so safety is covered by structured data. The description adds only the notable behavioral claim that no REST fallback is required — useful, since it tells the agent this works in a pure-MCP deployment. It says nothing about the identity fields' format, whether the 'served version' can differ from a build artifact, or what 'dirty' means in practice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.