Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations, it explains that the tool relays to the same public POST endpoint, holds no keys or funds, is free with a valid signature, and records but does not accept the intake. It also identifies the signer model (wallet or passkey) and the returned id/Regen account context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.