Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover safety (readOnly, openWorld, non-destructive), and the description adds substantial behavior: oldest-first ordering, each reply returned exactly once, empty list means nothing yet, typical latency of a few minutes, a 6-checks-per-minute rate limit, and a 24-hour token expiry. This is exactly the operational context an agent needs to poll correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.