Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), but the description adds genuinely new context: metered read-only billing, misses never billed, one-off trial credit per key, and that 'compact' is tokenizer-measured while 'full' preserves the legacy contract. It also scopes the answer to publisher-declared registry metadata, warning the agent off behavioural inference. It stops short of describing failure modes for an unpublished or nonexistent version pair.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.