Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, and the description goes well beyond them: it discloses the analytical scope boundary (direct counterparties only, multi-hop requires fund-trace), the risk model (taint by association, both directions), the auth/pricing model ($0.05 per call over x402, x-credit-token header, 1 free call/day, no API key), and what is returned. That is exactly the extra context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.