Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the read-only safety profile, so the description carries the rest and does well: it discloses what comes back (configMode, WhatsApp routes, editable prompt) and, importantly, the non-obvious semantic that effectiveText is the WhatsApp LiveKit prompt while providerHostedEffectiveText is the unchanged provider-phone prompt. It stops short of mentioning permission or lookup-failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.