Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safe read-only, non-destructive, closed-world profile. The description adds meaningful context beyond that: the permission scope required (billing:read) and the account/key prerequisite. It still omits ordering guarantees, pagination, and whether the list is capped by 'Latest'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.