Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive), and the description adds substantial context beyond them: the server cannot post into the conversation so the agent must relay results, a hard cap of 20 newest matches, price reported in CZK with a verdict at match time plus a link, aggregator coverage limits, and the caveat that a car may already be sold. This is exactly the behavioral disclosure a read tool needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.