Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (readOnly, idempotent, openWorld, non-destructive) by disclosing the payment model: $0.08 per call over x402 on Base, a prepaid x-credit-token header for unlimited calls, 1 free call/day, and no API key required. It also states the shape of the result (score, risk level, top signals, riskiest-first ordering), which is exactly the auth/cost context an agent needs before invoking a paid tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.