Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-read-only, non-idempotent, non-destructive, closed-world, but do not cover the key lifecycle. The description adds genuinely new behavior: you receive your own bound key on their account, shown once (a secret that cannot be re-read), which is important for correct handling. It stops short of noting failure modes for invalid/expired codes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.