Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and non-destructive, so the safety bar is low. The description adds two things beyond them: that the call is free/no-cost and that it must be polled until a 'done' flag is true, which is meaningful behavioral context for a long-running job tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.