Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, idempotent, openWorld, non-destructive), yet the description adds substantial context beyond them: per-call pricing ($0.002 single, $0.008 batch), the 402 challenge, the prepaid x-credit-token header, no free tier, no API key required, and the returned fields (title, author, publish date). This is exactly the extra behavioral disclosure that annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.