Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety (readOnly false, destructive false, non-idempotent), and the description adds real context beyond them: single-use semantics, default 1 use / 24h validity, and the fact that the code is relayable by a human without exposing a key. It does not discuss revocation, reuse-after-max_uses behavior, or what happens if the same key mints repeatedly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.