Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and open-world, so the safety profile is covered. The description adds genuinely useful behavior beyond that: metadata provenance from Crossref (real publisher records, not generated text) and a per-call volume limit. The only blemish is that the stated 'up to 50 DOIs' does not match the schema's maxItems of 60, which could confuse an agent about the true cap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.