Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, openWorld, non-destructive), and the description adds genuinely non-obvious behavior: a 0.01 USDC charge on Base x402 per call and an X-Provider-Key header for customer-owned credentials. That is real cost and auth disclosure an agent cannot infer from structured fields. It does not say what the fingerprint is (hash algorithm, stability across fetches) or how failures surface, which keeps it off a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.