Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, open-world, non-idempotent and non-destructive, so the safety profile is covered. The description adds real behavioral context beyond that: quota accounting ('one admitted API call consumes one shared account request, including admitted errors'), no automatic retries, and null-means-unknown semantics. It stops short of describing failure modes or pagination, but the quota/retry disclosure is material.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.