Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (which only mark it non-readonly, non-idempotent, non-destructive), the description discloses the cost model ('Spends credits ... charges the quoted credits, never more'), the consent requirement, the 10-minute quote expiry, and the single-run constraint. These are exactly the behavioral traits an agent cannot infer from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.