Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds real context beyond them: the data is limited to the latest completed sync (freshness), results are capped at 20 (completeness limit), and email, postal addresses and Xero IDs are stripped (a return-shape constraint). It does not say what happens on an empty or not-yet-synced case, but the added disclosure is substantial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.