Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even with annotations declaring readOnly, idempotent, and non-destructive behavior, the description adds meaningful context: it returns 'best first' matches, provides jurisdiction_id, mentions verified_status/verified_at, and explains that source text is copied data not instructions. This last point is a valuable prompt-injection guardrail that goes well beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.