Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, which already establish read-only, idempotent, non-destructive, non-open-world behavior, the description adds cost and auth context ('Free, no auth'), result volume ('up to 10 hits'), returned fields, and the next-step retrieval path via get_record.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.