Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, openWorld, non-destructive), the description adds rich behavioral context: the exact frozen data range, the fact that ECDC discontinued reporting in December 2023, the CC BY 4.0 licensing, and that no auth is required. The 'frozen historical dataset, not live surveillance' caveat is a critical behavioral constraint an agent needs to avoid misinterpreting the data as current.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.