Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered; the description then adds genuinely new behavior: a hard result cap of five, the word-containment matching rule, the exact fields returned, and an explicit privacy boundary (no contact details, tax id or address). That disclosure of what is deliberately withheld is exactly the kind of context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.