Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint and destructiveHint=false, so the safety profile is covered by structured data. The description adds genuinely non-redundant behavior: the upstream source (Crossref publisher records, Unpaywall for OA), the 30-works-per-call ceiling, and a negative-capability clause (no summarizing, no full-text reading, no quality judgement) that prevents misuse. It stops short of noting result freshness, ranking caveats, or what the returned bibliography file contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.