Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true, idempotentHint=true, and openWorldHint=true, so safety and idempotence are covered. The description adds pricing ($0.02/call, x402 on Base), auth options (x-credit-token header, 1 free call/day), and what the score represents (0-100 suspicion, verdict). These are operational details beyond what annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.