Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, openWorld), but the description adds substantial non-structured behavior: not_found is a charged 200, malformed input is an uncharged 422, RPC failure is an uncharged 503, typical latency 0.3-2 s, price and free-tier quota. The prompt-injection warning about returned page text is a genuine operational caveat absent from the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.