Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only declare the generic profile (not read-only, open-world, non-idempotent, non-destructive), while the description adds the operationally important facts: no API key or account needed, the pending capture is stored before the call returns, and the write is public so secrets/credentials/personal data must not be sent. The notify_url delivery contract — one signal with a result URL, not the captured payload — is behavior an agent could not infer from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.