Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld/non-destructive, and the description adds value beyond them: returned fields (name, symbol, decimals, total supply, is_erc20:false), latency 0.2-1 s, cost USD 0.003, a 10-read/day free tier, and a prompt-injection warning about attacker-controlled on-chain strings. That is substantive operational and safety context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.