Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (non-destructive, idempotent), and the description adds material context beyond them: case-insensitive matching, dedupe semantics on re-send, the shape of the response (saved state of every term, new or pre-existing), and that the operation is free with no credit cost.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.