Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/openWorld, so the safety profile is covered; the description goes further by disclosing cost ($0.01 USDC via x402), the billing rule that errors are not charged, and the negative behavior that no SMTP probe is performed. Those are material traits an agent cannot derive from annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.