Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only declare the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds operational behavior beyond that: 32 KB max payload, 60 RPM rate limit, statelessness, the two settlement paths ('?demo=true' vs MPP for 100 sats), and failure behavior (HTTP 400 on invalid input). These are exactly the execution traits an agent needs before calling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.