Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only and open-world safety, but the description adds crucial behavioral details: the data source (products.json), that no key is required, failure mode (404 for blocked stores), and the pricing model ($0.002 USDC per successful call, paid via x402 on Base/Solana/Arc, failed calls not charged). This goes well beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.