Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, covering the safety profile. The description adds meaningful behavioral context: the matching behavior on companyName and the caution not to silently mix projects. It also reveals that results depend on the API key's permissions. This goes beyond annotations, though it does not describe return format or pagination, which are reasonable gaps for a read-only list tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.