Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=true, destructive=false, openWorld=true, so the safety profile is covered. The description earns credit for adding non-obvious operational context: the tool never sends messages, requires server-side provider configuration, is free and unauthenticated, and is rate limited — auth and rate-limit details are exactly what annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.