Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say it is a non-read-only, non-destructive, closed-world write. The description adds genuinely new behavioral facts: the operation is synchronous, it should only run on explicit user request, and it returns mmp_not_enabled when MMP is not enabled for the tenant. That error-state disclosure is useful context an agent could not get from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.