Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/closed-world, yet the description still adds substantial context beyond them: hard limits (100,000 lines, 20 MB, 64 KiB per line), per-block pricing with no free tier, ~1 s latency, and a privacy guarantee that submitted text is never logged or stored. It also flags a prompt-injection trust boundary for returned page text and on-chain strings. The only gap is that it doesn't describe the shape of the burst/cohort results, which is partly covered by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.