Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (which already declare non-destructive, non-read-only), the description adds two useful behavioral facts: the source file is left unchanged, and the call is asynchronous, returning a toolExecutionId that must be polled via get_tool_execution. These are concrete details not derivable from the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.