Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety (readOnly, idempotent, non-destructive), and the description adds behavior they cannot: it reuses captured source numbers and selection rather than recalculating, expired evidence requires an explicit new read, and displayed probabilities are not calibrated confidence. Those are the details an agent needs to avoid misusing the output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.