Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, closed-world and non-destructive, so the safety profile is covered. The description adds genuine context beyond that: the answer is derived 'from what the product implements' and it discloses a real limitation — a payer may be supplied but is not evaluated, and the response says so. It stops short of describing latency, auth, or failure modes, but the output schema covers the return shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.