Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint=false, destructiveHint=true, openWorldHint=true), and the description adds real value beyond them: it discloses that the call charges credits, that max_credits caps the charge, and that a stable idempotency_key yields exactly-once retries surfaced as idempotent_replay:true — a conditional idempotency the flat idempotentHint=false cannot express. It omits the approval_token/approval-error flow, which is the one notable behavior left undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.