Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish this as a safe, idempotent read (readOnlyHint, idempotentHint, destructiveHint=false), so the bar is lower. The description adds genuinely useful behavioral context those annotations cannot express: the call requires either an OAuth connection or a bearer token, which tells the agent about failure modes. It does not mention pagination or rate limits, but neither is relevant for a single-identity lookup.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.