Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the readOnly/idempotent/openWorld annotations by disclosing that duplicate keys and invalid JSON cause failures, that no business data is inferred, and that the original decoded jsonText is returned with URL, retrieval time and SHA256. These are real behavioral traits an agent cannot derive from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.