Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover safety (readOnly, idempotent, non-destructive, openWorld); the description adds the operationally critical facts the agent cannot get elsewhere: the text is sent to an external language model, the default path uses a small shared daily allowance via Google Gemini, and an X-OpenRouter-Key header switches to the caller's own key. That is exactly the kind of auth/quota/external-service disclosure that matters for a tool whose input leaves the process.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.