Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, so safety is covered. The description adds valuable context beyond annotations: it specifies the returned data is 'safe metadata' and enumerates omitted fields (contact, legal-entity, address, banking, integration), and constrains results to the authenticated organization's business. This informs the agent about content filtering without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.