Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as read-only, idempotent, and non-destructive. The description adds extra transparency by explicitly stating that no order is accepted, no checkout data is returned, and no external provider is called. This aligns with annotations and provides further behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.