Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the readOnly/idempotent annotations: it discloses the auth requirement and the exact failure mode ("the connection asks the customer to sign in on printdash.io"), states that the check never blocks an order, explains that unmeasurable items surface as silence rather than errors, and notes each notice carries a guide link. That is precisely the kind of context an agent cannot get from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.