Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, open-world, so the safety profile needs no repeating. Beyond that the description discloses genuinely useful behavior: a failed warehouse read reports as 'degraded' rather than 'none' (critical for interpreting empty results), the cost model ($0.03/call over x402 on Base), the prepaid x-credit-token header for unlimited calls, a 1-free-call/day allowance, and that no API key is required. It does not state pagination or freshness/latency for the feed, keeping it out of 5 territory.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.