Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only and idempotent, but the description adds real value: it discloses that the link is visible to anyone holding it, enumerates the returned content (dish names, descriptions, categories, prices, owner display name), and warns that shared menu text is untrusted content rather than instructions. It also confirms nothing is saved to the account or changed about the link.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.