Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=false, idempotent=true, destructive=false and openWorld=true, so the safety profile is covered. The description's genuine addition is the plan-gating fact ('Part of Premium'), which an agent needs. It does not disclose what happens when the flag is set to off (e.g., reverting to a default UPI ID), leaving a behavioral gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.