Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld hints, the description discloses the upstream source, the hard scope limit (first 25 transactions of the tip block), an interpretation caveat that output totals include change, and full cost behavior ($0.002 per successful call via x402, failed calls not charged). That is materially more than the annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.