Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), but the description adds genuinely useful behavior: zero credit cost, the guarantee that no decode is executed, conditional decode presence ('when it has one'), and concrete auth steps including the OAuth flow and Authorization: Bearer acd_live_… header. It does not describe error/empty-decode handling, keeping it out of 5 territory.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.