Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare destructive and idempotent, but the description adds the substance: why staleness matters (entries are re-read every run), the exact idempotency semantics ('returns deleted:false, not an error'), the undo procedure and its caveat (restore_deleted fails if the key was rewritten), and the blast radius (your memory note only). That is real context beyond the structured hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.