Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With annotations covering only the safety profile, the description carries substantial extra behavioral detail: a cron polls DexScreener every 10 minutes, the callback is HMAC-signed with a secret returned once, delivery is retried up to 3 times, alerts expire after 30 days, and polling returns one of THRESHOLD_MET/ok/FIRED/unknown. Pricing ($0.05 over x402, prepaid x-credit-token header, 1 free call/day) is fully disclosed. The readOnlyHint annotation sits somewhat oddly on a state-creating registration that persists for 30 days, but the description itself is candid about the state it creates.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.