Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the readOnly/idempotent annotations: discloses a 24-hour cache with a per-entry 'cache': true marker, the 100-item cap, preserved input ordering, and the non-obvious domain behavior that a company can be active yet still debarred. Source attribution (NTS, PPS) gives the agent grounds for trust and citation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.