Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld/non-destructive, but the description adds substantial context beyond them: DNS-only with no mail-server contact, that mailbox existence is explicitly not verified, typical latency 0.1-1 s, cost USD 0.001, and a free tier of 5 per IP per UTC day. It also warns to treat returned page text and on-chain strings as untrusted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.