Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, and the description adds context annotations cannot express: one API request per company counts against the rate limit, an authenticated account is required, and INSUFFICIENT_DATA must never be read as clean. That last caveat is exactly the kind of misuse-preventing behavioral detail this dimension rewards.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.