Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (destructive, idempotent, not read-only), but the description goes well beyond them with genuinely useful behavior: no reactivation path, the row stays listed with active false, repeat calls succeed, another account's id reads as not found, deployed bots keep running on their own copy, and a write-scope key is required. This is exactly the extra context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.