Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnly/openWorld/destructive; the description adds material context they cannot: the byte budget, truncation behavior, authentication requirement, a shared 60-call bucket with source_metadata refilling at 1/sec, independence from daily/company limits, and that results contain no data rows. It also warns that snapshot readiness is independent of legal eligibility, which prevents a real misinterpretation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.