Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, non-destructive, non-open-world, and non-idempotent behavior, so the safety profile is covered. The description's one genuinely additive disclosure is 'Purchase', implying the call consumes credits/quota — a real behavioral trait not expressed in annotations and consistent with idempotentHint=false. However, it says nothing about cost magnitude, caching, rate limits, or failure modes when the symbol is unknown, so the disclosure is useful but shallow.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.