Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly/idempotent/non-destructive), and the description adds genuinely non-structured behavior: 32 KB payload ceiling, 60 RPM rate limit, L402 payment of 15 sats with a ?demo=true bypass, and HTTP 400 on invalid input. This is well beyond annotation coverage; it stops short of 5 only because error/limit context is compressed into one dense clause rather than explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.