Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag readOnly/idempotent/non-destructive, and the description usefully adds that the call itself is free, that no payment executes inside MCP, and that user approval of the amount is required before paying. This is real context beyond the structured hints, though it omits what happens if the endpoint is unavailable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.