Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the burden of behavioral disclosure. It explicitly uses 'Read,' which implies a non-destructive operation, and 'optionally filtering' conveys that unfiltered calls may return all messages. However, it does not mention permissions, response format, pagination, or any side effects, leaving room for improvement. The read nature is self-evident but lacks rich context beyond that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.