Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower. The description adds genuinely useful context beyond them: the payload is signed with an 'example secret', the included verifier is guaranteed to accept the sample, and no key or API call is required. It stops short of describing payload size or exact return shape, but the output schema covers that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.