Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as read-only and open-world, but the description adds substantial behavior beyond them: supported chains, output fields (sanction status, list name, SDN program, source link), the explicit caveat that it never declares an address clean, the informational-only disclaimer, the $0.003 USDC price via x402, and that failed calls are not charged.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.