Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, idempotent, non-destructive, closed-world behavior. The description adds genuinely new behavioral context beyond those hints: input values are rejected, a human fills them via browser, and no tool ever returns the values. It stops short of describing duplicate handling or the response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.