Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, 'Read-only' is a genuinely useful safety disclosure and 'live' signals real-time upstream calls rather than a cache. However, nothing is said about latency, rate limits, or failure modes such as a malformed or nonexistent address — gaps a mutation-free tool still owes the agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.