Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover read-only and open-world, but the description adds real value beyond them: native MX/SPF/DMARC checks, the explicit caveat that MX availability is not mailbox verification, that email patterns are inferred only from observed examples, and the pricing rule ($0.01, no charge when nothing found). This preempts the two most likely agent misinterpretations. It stops short of return format/pagination or rate-limit details, so not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.