Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent/openWorld annotations by disclosing the x402 cost (0.25 USDC on Base, eip155:8453), that the MCP tool itself is free and never executes analysis or moves funds, statelessness w.r.t. snapshot history, and unsupported reference constructs. This is exactly the extra behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.