Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the whole burden and only discloses one failure mode ('without it you get an error'). It says nothing about read-only semantics, permission requirements, or rate limits, and it frames key as mandatory when the schema actually marks only audit_id as required – an inconsistency the agent will trip over.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.