Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive, but the description goes well beyond them: statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, demo-access via '?demo=true' or L402 payment of 150 sats, and an HTTP 400 failure mode for invalid input. These are operational facts an agent cannot obtain from the annotations and that directly affect retry and batching behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.