Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, openWorld, non-idempotent), the description discloses genuinely useful behavior: the check is live against VIES, coverage varies by member state ('where the member state shares them'), sole traders' names are withheld for privacy, and the cost is $0.005 per call via x402 or credits. It doesn't state latency, rate limits, or failure modes for an unreachable VIES.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.