Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations with cost (25 credits / 25p), geography (UK only), keying (UPRN not address), and — most importantly — the `sections_degraded` contract explaining that a failed section degrades in place and reports the kind of absence (`not_found`, `no_certificate`, `not_available`, `error`), each with different implications. It also guarantees parity with the standalone tools' receipts. That is materially actionable behavior an agent cannot infer from readOnly/idempotent hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.