Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive, closed-world, yet the description layers substantial extra behavior: required auth scope, tier gating, the `unlock_required` error path, the MPP payment fallback, the guarantee that it never consumes quota or charges, and an AI-generated-text disclosure. This is exactly the kind of context annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.