Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, openWorld), and the description adds substantial context beyond them: latency (0.2-1 s), price (USD 0.002), a free tier (10 chain reads per IP per UTC day), the exact return shape, and a security caveat that token symbols and on-chain/page text are untrusted. This is rich behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.