Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only declare the generic profile (not read-only, open world, non-idempotent, non-destructive), while the description adds details that the agent could not otherwise infer: the authorization persists until revocation or account disablement, is independent of browser session length, the connection entry itself lapses after 10 minutes, historical services are not auto-claimed, and no charge can occur without confirmation. It also states a critical security boundary: passwords and verification codes are entered only on the original site. This is exactly the behavioral context that annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.