Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-readOnly, non-idempotent and non-destructive, and the description goes well beyond them: it states the payload is re-signed afresh, that normal retries still apply, that the original delivery record is left intact, and that a rate limit of 30/min applies. Those are the operational facts an agent needs before firing a write that cannot be safely repeated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.