Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already declares the safety profile, so the bar is lower. The description adds value by disclosing the returned field set and that the issuer is scoped to 'the API key' (i.e., implicit credential-bound identity), plus the underlying endpoint GET /v1/issuer/details. It omits auth requirements and rate/credit-consumption behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.