Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, and destructiveHint, so the agent knows the tool is safe and idempotent. The description adds valuable behavioral details: the rate limit (5 req/min), timeout (30s), and the specific analysis areas (SSL, DNS, etc.). This goes beyond what annotations offer, though it does not describe error handling or edge cases.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.