Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes far past the annotations (destructiveHint=true, idempotentHint=false) by disclosing the re-read side effect, the cross-app daily-cap accounting, the first-brief lock, and precisely what a duplicate idempotency_key does — returns the first answer, starts no second job, spends no allowance. The key-based retry semantics reconcile with idempotentHint=false rather than contradicting it: idempotency is caller-supplied, not intrinsic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.