Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent/open-world safety, and the description goes well beyond them: 422 vs 5xx error semantics, that failed calls are not charged, latency expectations (under 0.1 s, up to 10 s on refresh), pricing (USD 0.001) and a free tier of 10 calls per IP per UTC day. It also discloses provenance (ECB euro reference rates, Tanod-computed cross rates) and a licensing disclaimer.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.