Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld annotations, the description discloses the S10 check-digit validation, service-type decoding, country naming, returned tracking links, lack of live scan history, and the x402 pricing model including that failed calls are not charged. This is unusually rich behavioral context for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.