Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses that deletion is permanent and that query tokens are destroyed and cannot be reconstructed, explains that a 404 deliberately conflates 'does not exist' with 'not yours' so the agent must not leak ownership, documents the return payload, auth requirements, and a 100/min rate limit. This is exactly the behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.