Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations already covering the safety profile (destructiveHint=false, idempotentHint=true), the description still adds non-obvious behavior: the first 5 calls/IP are free, failed target connections do not throw tool errors, status_code>=500 forcibly overrides the verdict to 'sla_breach_confirmed', and omitting tx_hash yields a probe-bound rather than payment-bound receipt. These are exactly the rate-limit, error-semantics, and side-effect details annotations cannot express, and nothing contradicts them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.