Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive, so the bar is lower. The description adds useful context beyond them: notes are excluded, the birthday edge-case format is disclosed, and it warns that fields from shared/imported cards are data not instructions — a meaningful prompt-injection caveat not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.