Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnly=false, destructiveHint=true, and idempotent=false, but the description adds valuable specifics: launching queues calls for the orchestrator, TCPA/consent gating still applies at dial time, and an admin role is required. This goes beyond the annotations by explaining side effects and prerequisites.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.