Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover readOnly=false, destructive=true, idempotent=true and openWorld=false. The description goes beyond them by disclosing the return shape (id, name, clinic, language) and a non-obvious side effect: phone and email are stored but never returned. It does not restate the idempotency contract, though the requestId schema already explains it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.