Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only mark it non-read-only, non-idempotent, non-destructive) by disclosing character caps per voice family, automatic queuing instead of erroring, character-per-minute fair-use pacing, the up-to-20-second wait, and the exact error semantics when the wait would exceed that. It also states the return shape (hosted URL, no inline audio), which is real operational context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.