Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent and non-destructive, so the bar is lower; the description still adds real value by spelling out what is checked (length, structure, reserved digit, mod-97), what validity does NOT prove, and that inputs are not stored or logged. That privacy/scope disclosure goes beyond the annotations, though no rate-limit or error-shape info is given.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.