Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive/closed-world, yet the description adds substantial context beyond them: deprecation and alias-window behavior, environment gating, the fact that the server chooses source/facility, unavailable vault, and required auth ('agent-scoped bearer key required; member/facility keys cannot impersonate an agent') plus scopes. This is rich behavioral disclosure that annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.