Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=false, idempotent=false, destructive=false and openWorld=false, so the mutation profile is covered. The description adds genuine non-annotation context: deliveries use the v2 envelope and are signed with the project signing secret, which tells an agent how consumers must verify payloads. It stops short of saying whether the secret is returned at creation time.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.