Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld and non-destructive, so safety is covered. The description goes beyond them with genuinely useful operational context: access/delay/metered usage follow the connected account, one bounded request with no server-side polling or retry, and affiliate 27 is excluded. That is real disclosure the annotations do not carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.