Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses the authorization requirement and the six-digit code shape, and implies an outbound email side effect. It says nothing about rate limits, what happens on failed verification, or the consequences of listing, which is a real gap for a tool with email side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.