Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds the constraint that arbitrary URLs, tokens, headers, or writes are not allowed, which is useful context beyond annotations, but it still does not disclose what the read/preview actually does, what it returns, or its limitations. With annotations carrying the safety profile, this is a modest addition, not rich transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.