Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare that this is a non-read-only, non-destructive write, so the description carries the real burden and does: scopes default to the caller's and may never be wider, a 5-key trial ceiling, trial-scope clamping while the owner is unverified, one-time secret return ("store it"), and team-key revocation on leaving the team. These are non-obvious consequences an agent must know before invoking.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.