Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, open-world), so the bar is lower, and the description adds real value: it discloses the API-key authentication requirement and the owner-only access restriction. It could say more about polling behavior or whether status is terminal, but the auth constraint is the key missing piece and it is present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.