Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only declare non-read-only, open-world, idempotent, non-destructive): it discloses survival past browser close, that webhook delivery may duplicate an event, bounded retries, the fresh-vs-reused idempotency_key discipline, Zapier-only hooks, and the absence of a hard real-time guarantee. This is exactly the extra behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.