Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does add real value: it declares the SSRF guard (private IP ranges blocked) and the default redirect behavior. However, it omits that the exposed method parameter permits POST, which sends a request with potential side effects on the target, and says nothing about rate limits, redirect caps, or how timing is measured.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.