Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so safety is covered. The description adds genuinely new behavioral context — that per-engine country support differs and some engines block certain countries — which an agent would not infer from annotations or schema. No mention of result shape, but an output schema exists, so that burden is not on the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.