Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does meaningful work: it declares irreversibility, names the exact side effect (entity marked withdrawn), and scopes the private_key_jwk to this call only. It stops short of stating permissions required for the key or what the response looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.