Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, non-destructive, closed-world, so the safety profile is fully covered. The description adds genuinely useful domain context the annotations cannot: that the download link is short-lived and only present once the job succeeds, and that usage counters are scoped to the organisation. That is value beyond structured fields, but permissions, rate limits, and expiry specifics are still absent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.