Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, but the description adds real value beyond them: links are private and signed, a repeat read refreshes expired links, the original source is retained, and no processing or charge is repeated. The charge/re-processing note in particular is behavior an agent needs before re-calling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.