Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses a hard cap ("Up to 5 alerts per account"), a non-obvious email-routing quirk ("the address the account had when the token was made"), and an auth requirement. The annotations only say this is a non-idempotent, non-destructive write; the description supplies the constraints and consequences that actually shape a correct call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.