Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent/closed-world annotations, the description discloses the shape of the return (tailored checklist, a 'never paste' list, and an application link) and the abstraction level ('describes documents by type only'). It also adds a security boundary — do not send card numbers, government IDs, or bank details — which annotations alone would not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.