Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (openWorldHint=true, idempotentHint=true, destructiveHint=false), and the description adds two pieces of context the annotations don't: the per-call cost ('1 credit') and the best-effort caveat that mailbox verification only happens 'when the server allows'. It still doesn't explain latency, failure modes, or why readOnlyHint is false for what reads like a lookup.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.