Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the write/non-idempotent/non-destructive profile, but the description goes well beyond: no auth required, the key is returned once and cannot be retrieved again, unverified rate limits (60/hour, 400/day, one key), what verification unlocks, and the no-reissue behavior that confirms the non-idempotent hint. This is exactly the operational context the annotations can't carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.