Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower, yet the description still adds real behavioral context: agent-scoped bearer keys are required and member/facility keys cannot impersonate, receipt semantics are not proof of handling, and denial behavior is called out. The main weakness is that the auth/scope material is somewhat repetitive rather than additive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.