Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the read-only/idempotent safety profile, but the description adds substantial behavioral context: the URI is capped text and never fetched, returned strings are attacker-controlled and must be treated as untrusted data rather than instructions, malformed node answers surface as 5xx and are not charged, and typical latency is 0.3-2 s. That security and billing disclosure goes well beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.