Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds valuable context beyond annotations by specifying that addresses, phone numbers, channel credentials, payment configuration, reminder configuration, and guest data are excluded, and that the scope is the authenticated organization. This sets clear expectations about data content.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.