Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent/destructive annotations: it discloses the failure mode (404, not charged), expected latency (under 1 s), cost (USD 0.001, no free tier), and a security caveat to treat returned page text and on-chain strings as untrusted data. That is substantive operational context an agent cannot get from annotations alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.