Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent and non-destructive, and the description matches with 'Read-only.' Beyond that it adds genuine context the annotations cannot: results are scoped to the latest completed sync (a staleness signal), payment data is aggregate rather than itemized, and named fields are excluded (Xero IDs, payment IDs, email addresses, message content). It does not describe pagination or error behavior, but for a single-record read that is minor.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.