Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover the safety profile (readOnly, openWorld, non-destructive). The description adds substantial behavior beyond them: no redirect following, no body fetch, one server vantage, and a concrete rate limit (10 attempts per IP per 24h, honor Retry-After).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.