Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, idempotent, non-destructive), the description discloses specific safety behaviors: 'performs no arbitrary fetching, makes no contact request, changes nothing, and stores nothing.' It also enforces 'only stable Tier1 finding identifiers,' providing additional context about what the tool accepts.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.