Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only, idempotent, and non-destructive, and the description adds meaningful behavioral detail: it never fetches external data, never triggers payment or paid fallback, and abstains when evidence is ambiguous. It also discloses the evidence sources it relies on, which goes beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.