Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the one-time-use semantics, the 10-minute expiry, the recovery path ('a new one can be requested if it lapses'), and the handling constraint that the agent must not open or share the URL. The annotations only declare the safety profile (readOnlyHint=false, idempotentHint=true, destructiveHint=false); the description supplies the operational behavior an agent actually needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.