Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/openWorld annotations: pricing ($0.01 per call), the x402 USDC-on-Base payment channel and MPP HTTP endpoint, a 10-record cap, the non-obvious 'empty organizations is a paid 200' behavior, and an explicit disclaimer that no legal conclusion is computed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.