Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint false. The description goes well beyond this: it explicitly states 'it never signs, transfers, or approves anything on the caller's behalf', discloses the payment model (pricing, x402 v2, no account/API key), explains the HTTP 402 flow with payment challenge, and notes the batch limit of 5. No contradiction with annotations; it adds critical operational behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.