Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say read-only/idempotent/non-destructive; the description adds substantial context beyond that: the client and sign-in constraint, branching behavior by environment count (single → views, multiple → status choose_environment with ask_user), error codes DATAVERSE_NOT_AVAILABLE and DATAVERSE_CONSENT_REQUIRED with admin_consent_url, and ingest-time geocoding of address-only rows.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.