Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is largely covered. The description adds the authentication requirement and the 'preview' semantics, which reinforce that no mutation occurs. It does not describe additional behavior such as response shape or whether fees are calculated live, but the output schema covers return values and the annotations cover the core side-effect profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.