Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, closed-world, non-destructive behaviour. Beyond that, the description explains the excerpt-by-default behavior, the full=true escalation, and that shared names surface as a candidate list — non-obvious result-shape facts the annotations do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.