Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the safety profile is partly covered. The description goes beyond them by spelling out auth requirements: no user token, wallet signature, cookies, or personal account authentication, plus that it is not a trading endpoint. It stops short of describing rate limits, caching, or behavior when token ids are unavailable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.