Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the description does not need to restate safety. It adds value by detailing what the canonical record contains—provenance, vendors, datasheet links—which lets the agent anticipate the response shape. It doesn't mention the privacy-logging behavior of project_context, but that is disclosed in the parameter schema, so no contradiction exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.