Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the full safety profile (readOnlyHint, idempotentHint, non-destructive, closed-world), so the bar is lower. The description adds that results include credits reserved, charged or refunded, which hints at billing side effects, but says nothing about auth, staleness, or polling frequency. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.