Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond readOnlyHint=true, the description discloses real behavior: the plan uses exact-approval semantics, the max share price is enforced onchain as ERC-4626 inflation protection, shares are minted only to the sender, and 'the server performs no data fetch' — meaning the tool does not verify state itself. The weak point is that it does not say what the tool returns (an unsigned plan) or that signing/broadcast is out of scope, though the output schema covers the return shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.