Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/non-destructive, but the description adds genuinely new context: no key, credits, wallet or preparation required, free during validation, and that existing source/input limits apply. The only tension is idempotentHint=false against a tool described as deterministic, though that is an annotation oddity rather than a description that misleads about what the tool does.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.