Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: caching window (5 minutes), billing behavior (empty results not charged, non-empty snapshots charged at USD 0.05 with no free tier), latency range (1-2 s typical, up to 20 s), and a prompt-injection warning to treat returned page text as untrusted. Annotations only cover read-only/idempotent semantics, so this is substantial added context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.