Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: discloses cost (free, no gas), custody model (house never holds a key; signed by the person's own wallet or passkey), the gate's validation behavior, and the three possible outcomes (recorded request, resolved to an existing/new governed packet, or blocker). The retry warning is especially valuable given idempotentHint=false, where a blind resubmit could duplicate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.