Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/openWorld annotations: it discloses the truncated-answer marking with reason, the partial free index caveat, the 500 cap, dedup ordering, wildcard flagging, and public-only scope. The x402 payment model, price, accepted chains, and no-charge-on-failure are all stated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.