Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the immediate operational effect (URL and every embed stop accepting responses), that data is retained, that republishing reverses it, and that outward-facing connections trigger a human approval link. The approval-link detail is auth/routing context the annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.