Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only and idempotent annotations, the description adds substantive behavioral context: pending is not success, failed can indicate an uncertain write, and the tool deliberately does not expose saved arguments, narrative results, or cross-connection requests. These are meaningful operational and privacy traits that an agent could not infer from structured fields alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.