Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover safety and idempotency; the description adds the quota accounting semantics ('TOUT OU RIEN', nothing deducted on quota_exceeded), the error code, the batch_id resume path, the returned per-invoice state plus signed ZIP link, and a prompt-injection warning about untrusted invoice content. That is substantial disclosure beyond structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.