Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=true, openWorldHint=true), and the description adds genuinely new context beyond them: auth requirement (wallet login), a consent gate (recovery-policy acknowledgement), irreversibility risk ('a successful burn cannot be reversed by Vino'), and cost allocation ('customer pays gas on both chains') plus the absence of signing/broadcast. Mild tension with readOnlyHint=false exists since a quote reads as passive, but the operation_id/recovery-policy parameters suggest persisted state, so this is clarification rather than contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.