Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (which only say it is a non-read-only, open-world, non-destructive write), the description discloses the crucial behavioral facts: the first call is free, charging only occurs on the second call with `payment`, and idempotency context matters for retries. It also discloses the non-obvious delivery semantics — PM lands on the wallet bound to this key, not the paying address — and the value constraint that PM is non-redeemable and has no cash value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.