Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, closed-world, non-destructive, and the output schema carries the return shape, so the bar is lower. The description adds the meaningful trait 'deterministic' and the disclaimer field, but says nothing about cost, latency, or that results are stable across calls beyond that word.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.