Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower, yet the description adds real context: the check is offline, and crucially warns that a valid signature only proves signing by the embedded key, not by a trusted signer. This security caveat is exactly the kind of behavioral disclosure an agent needs. It doesn't describe return shape or failure modes, but an output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.