Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, openWorld and non-destructive, so the bar is lower, yet the description still adds real behavioral context: the host must be approved and public HTTPS, it is free during validation, no key/credits/wallet are needed, and source/input limits apply. It stops short of defining what 'approved' means or what those limits are.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.