Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=true, so safety is covered. The description adds useful behavioral context beyond that: it performs a network fetch, validates five specific 402 fields, screens against an OFAC list, and returns one of four verdicts. It also discloses the credit/auth model, though the referral details are not relevant to invoking the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.