Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false), but the description adds genuinely new behavior: the operation is free, and it requires authentication via OAuth or a specific Authorization header with a concrete key-creation URL. That auth and cost detail is not derivable from the schema or annotations. It does not, however, address the non-idempotent hint or what happens with a stale revision.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.