Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and delivers: it is read-only, requires no credentials, does NOT contact the endpoint (only reads existing monitoring history), specifies the returned fields (status, verification, reliability score, trustDecision), and handles unregistered URLs gracefully (returns { matched: false }, never an error). This is exceptionally transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.