Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry readOnlyHint=true, idempotentHint=true, and destructiveHint=false, and the description's 'Read-only' claim is consistent with them — no contradiction. The description adds domain-specific context beyond the annotations: 'never creates a checkout or payment obligation' disambiguates this read-only getter from checkout-creating siblings like prepare_site_report_checkout, which is genuinely useful behavioral information. It does not describe any other behavioral traits, but for a simple getter this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.