Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, so the safety profile is largely covered and the description's "Read-only call" restates it. It does add real value beyond annotations: a 32 KB payload ceiling, 60 RPM rate limit, auth options (?demo=true or MPP at 30 sats), and a 400 response on invalid input. Those operational limits are useful, but the return shape and how partial criteria satisfaction is reported are left unstated. With annotations carrying the behavioral baseline, this is solid added context rather than a full disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.