Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent/non-destructive annotations: 10 MB size cap, 25 s runtime, refusal of encrypted files, price of USD 0.01 with no free tier, 'failures not charged', and an explicit prompt-injection warning about returned page text and on-chain strings. These are exactly the operational facts an agent needs before calling a paid, closed-world tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.