Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses the exact relay endpoint, that the server holds no keys or funds, that the call is free with no gas, that signing is done by the user's own wallet or passkey, and what is returned. These are real operational traits (custody model, cost, trust boundary) not encoded in readOnlyHint/openWorldHint/idempotentHint/destructiveHint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.