Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the annotations (which already cover readOnly/idempotent/non-destructive) by disclosing billing semantics: not_found is charged like any answer, malformed answers are 5xx and not charged, price USD 0.002, 10 free reads per IP per UTC day, and typical 0.3-2 s latency. It also warns that returned page text and on-chain strings are untrusted data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.