Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the description wisely spends its words elsewhere: the URL is 'short-lived' (an expiry trait the agent cannot get from annotations) and 'private'/'tenant-owned' (an access-scoping trait). It does not say what happens if the synthesis is not yet complete, which is the main omitted behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.