Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a safe read-only, closed-world operation, and the description adds substantial context beyond them: empty-list vs not_found semantics, no auth or cost, a concrete rate limit (20/min per IP) with the resulting rate_limited error, and a data source. This is exactly the extra behavioral detail the agent cannot infer from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.