Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly, idempotent, and non-destructive annotations, the description adds meaningful behavioral context: character limits, output purity, per-call pricing, the 402 challenge behavior, optional x-credit-token header, free tier, and lack of API key/wallet requirements. This gives an agent the operational expectations needed to invoke it correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.