Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered. With no output schema, the description usefully discloses the return contents (hours, entry count, billable amount, per-day breakdown), though it says nothing about behavior for a non-matching or ambiguous client name.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.