Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readonly, idempotent, and non-destructive behavior. The description adds valuable response-level detail: authenticated:true with empty pending[] when connected, and connect_url plus per-install URLs when credentials are missing. This goes beyond what annotations provide and sets accurate expectations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.