Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint as safe. The description adds valuable behavioral context: deep/report tiers perform 'unpaid 402 probing' when paid_path is supplied, which indicates active probing of a paid endpoint without making a payment. It also lists the discovery surfaces scanned, which is not present in annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.