Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations mark it as non-read-only and non-destructive, and the description adds genuinely useful behavior: already-imported features are not re-read, only changed ones are listed, and the call consumes no AI and no credits. That cost/scope disclosure goes beyond the annotation set, though it doesn't address failure modes or permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.