Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry the read-only, idempotent, non-destructive profile, but the description adds several non-obvious behaviors: unknown ids and other-customer ids both return found:false rather than an error, and there is deliberately no distinguishing signal between the two cases. It also discloses a tier/entitlement constraint (sp500+, sample rejected), which is authorization context no annotation provides.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.