Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite readOnly/openWorld annotations, the description adds critical behavior: it returns an unsigned transaction plus approval step, never holds funds, runs a sellability check on unknown tokens, and refuses honeypots unless force=1. It also discloses pricing via x402, the x-credit-token header for unlimited calls, and one free call/day.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.