Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only/idempotent annotations, the description discloses the actual validation rules (name charset and length, camelCase and zero-parameter tools accepted, inputSchema must be object, required fields listed in properties), the strict documentation checks, the PASS/WARN/FAIL derivation, and the important caveat that a tools/list carries no server name so those checks are not scored. That is substantial behavioral disclosure an agent could not get from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.