Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, idempotent, non-destructive, and closed-world. The description adds meaningful context beyond that: 'offline', 'No DNS lookup, no network request', clarifying that it will not verify deliverability or reachability, which is exactly the boundary an agent needs to know. Only the exact return shape (field names) is left unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.