Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-destructive, closed-world, non-read-only. The description usefully adds that it is off-chain, never moves money, and gated behind org key plus explicit test mode. It does not say whether the quote is persisted, how long it is valid, or what the response contains, so it adds context but not full behavioral detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.