Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent/non-destructive annotations: it discloses the result cap (up to 10), ordering (closest match first), the presence of an id for follow-up fetch and a citation link, the critical semantics that a hit is name similarity and not an identity match, that a miss is not a clearance, and the operational profile (free, no account, 100 searches/day per internet address). This is exactly the context an agent needs to interpret and call the tool responsibly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.