Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds two useful behavioral notes beyond that: no private keys are received, and output is 'deterministic, evidence-bounded and signed' plus a 0.003 USDC cost. That extra context is real, but 'evidence-bounded and signed' is vague enough that it does not fully cash out as concrete behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.