Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/non-destructive and closed-world, but the description adds real domain behavior: it reads Everloot's current authorized public corpus when connected, a frequency only becomes public after 3 install reports, and an empty window is a measured zero rather than missing data. That zero-vs-absent distinction materially affects interpretation and is not in any structured field.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.