Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing output truncation limits (1,000 hunks / 5,000 change records, then `truncated`), sandboxing ('isolated, resource-limited child process without network'), the failure mode (over-limit input → 422, not charged), latency (~0.5 s), pricing, free-tier quota, and the data-retention guarantee ('never logged or stored'). For a stateless read tool this is unusually complete operational context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.