Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, openWorld, non-destructive), but the description adds substantial context beyond them: partial-success semantics with a `failed` list and per-URL reason, the no-charge guarantee when every URL fails, and the billing/auth model (x402 on Base, prepaid x-credit-token header, no free tier, no API key). That is exactly the kind of operational detail an agent cannot infer from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.