Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, non-destructive, closed-world), so the bar is lower, and the description adds real value: a hard 200-link ceiling, HTTP(S) destination resolution, free-mode behavior with no key/credits, and a warning that source and input limits apply. It stops short of describing ordering or dedup behavior, which matters given idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.