Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover safety (readOnly, idempotent, openWorld), and the description adds meaningful context beyond them: free/no API key, live VIES reach, the exact return shape, and the important caveat that some Member States withhold name/address, yielding name_disclosure=withheld_by_member_state. That disclosure issue is exactly the kind of operational behavior an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.