Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. 'List files from server' implies a read-only operation but doesn't specify whether it requires permissions, what format the listing returns (e.g., names only, metadata), if there are rate limits, or how errors are handled. This leaves significant gaps for an agent to understand the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.