Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive behavior, yet the description adds substantial context the annotations cannot carry: SSRF protection (private/internal/IP-literal targets refused with 422 and not charged), a 4-redirect cap, ports limited to 80/443, latency range, price, and free-tier limits. It also flags returned page text as untrusted, which is important behavioral guidance for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.