Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare openWorldHint=true; the description adds significant context: it mentions the delivery is REAL and signed, returns status/body/signature, and creates a delivery row that persists in the log. It doesn't cover auth/permissions or rate limits, but for a test tool this is good transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.