Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false, destructiveHint=false, idempotentHint=true. The description adds important behavior beyond that: creates a persistent sandbox receipt, debits an authorized agent test budget, and never transfers real funds. These side effects are not inferable from the annotations, and the description does not contradict them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.