Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the destructiveHint annotation: it discloses the exact credential class accepted (a user credential of the human who owns the buyer agent, with agent and service-account keys refused), the buyer-only authorization gate, and the double-spend-safe repeat-call behavior. These are the failure modes an agent needs to avoid before calling a fund-moving mutation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.