Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only/idempotent annotations, the description discloses that the tool is 'deterministic', does not execute JavaScript, does not bypass access controls, and uses caching controlled by the 'fresh' parameter. These are valuable behavioral traits that inform the agent's expectations and usage, exceeding the basic annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.