Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and closed-world, so safety is covered; the description still adds two things the annotations cannot: zero credit cost and the ownership scoping rule ('only the authenticated user's own results resolve; any other id is not found'). The 'Read-only' clause is redundant with annotations but the cost and auth facts are substantive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.