Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint and non-destructive, so the safety profile is covered. The description adds genuinely non-obvious behavior beyond them: this read-only call is a gate that emits an estimate_token that a later write requires. It omits whether that token expires or how long it stays valid, which matters for a token-consuming dependency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.