Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive, open-world, and the description adds real behavior beyond them: revenue-only records with null catalog slug and profile URL whose ID is still usable, alias/spelling-dependent matching, ambiguous names yielding multiple matches, and a clarification_required outcome for verification-style queries. These are exactly the failure modes an agent needs before calling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.