Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does add real behavioral value: automatic interception of destructive statements and a per-call billing model where charges confirm only on success and auto-refund on violation/timeout/failure. It still leaves ambiguous whether the SQL is merely generated or actually executed, and says nothing about latency or response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.