Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), yet the description still adds substantive operational context: stateless execution, a 32 KB input ceiling, 60 RPM throttling, authentication paths ('?demo=true' or L402 at 50 sats), and a 400 on invalid input. These are call-planning facts an agent cannot derive from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.