Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (destructive, non-idempotent, open-world), it discloses that the call spends wallet funds, queues an irreversible external transaction, must not be auto-retried on an ambiguous result, and that duplicate same-MSISDN-and-amount requests within 5 minutes yield HTTP 409. The confirmation precondition adds further operational context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.