Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare the safety profile (readOnlyHint=false, idempotentHint=true, destructiveHint=true), but the description goes substantially beyond them: it specifies what is left behind (listed under past as a record), what stops (holding paging), what does not happen (subscribers are not notified of cancellation), and the confirmation/prompt behavior. That is rich behavioral context that the annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.