Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only say non-readOnly, non-destructive, non-idempotent) by disclosing that the call creates pending proposals requiring human acceptance, that identities are never revealed, and exactly what credentials are needed. That is the side-effect and privacy context an agent needs before invoking.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.