Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations at all, the description carries the full burden and does well: it discloses the auth requirement, two concrete error responses, and the refund side effect on paid orders. It stops short of saying whether cancellation is reversible or whether the refund is synchronous, which are the remaining operational unknowns for a destructive action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.