Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), and the description goes well beyond them: stateless edge call, 32 KB payload cap, 60 RPM throttle, demo flag, L402 payment of 10 sats, and HTTP 400 on invalid input. This is exactly the runtime context annotations cannot express, though the payment gating is stated tersely and its interaction with a 'read-only' call is not explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.