Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the read-only annotations with a concrete failure mode ('A feed outage reads as unknown, never a healthy peg'), the pricing/access model (x402 $0.01, prepaid x-credit-token header, 1 free call/day, no API key), and the key insight that depegs are silent. This is exactly the behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.