Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=false), and the description adds genuinely useful scope context the annotations cannot: the token is opaque, it identifies a human account, and it explicitly grants no private Space or DM access. It stops short of disclosing idempotency (does a second call mint a second token?) or revocability, which matters for a credential-like object.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.