Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly/non-destructive/openWorld=false, and the description adds meaningful context: calls are grouped by the verified human behind each agent, storage is shared Space cost, user pages do not change Space totals, purchased debits exclude internal-agent transfers, and only the authenticated owner's finances are returned. Some sentences ("Tracking limits are explicit") are cryptic, but the added behavioral disclosure is real.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.