Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the annotations: discloses that the server holds no keys or funds, that it relays to the same public door any HTTP client uses, that it is free with no gas, and that the signature comes from the user's own wallet or passkey. With annotations only saying non-readonly/open-world/non-idempotent, this adds real custody and cost context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.