Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/openWorld, so the safety bar is lower, yet the description goes further: it discloses cache TTLs (300 s public, 24 h for selected stable reference tools), that stale results are marked, and that credentials are never forwarded and nothing is published. These are concrete behavioral traits not derivable from annotations. Only the return shape and failure behavior remain unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.