Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), so the bar is lower. The description still adds genuinely useful behavioral context beyond them: the listed data is unverified self-reported claims ('what people say they sent, not what has been received') because Kulhad cannot see bank accounts. That trust caveat materially affects how an agent should interpret and relay results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.