Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe read. The description adds the underlying REST mapping (GET /instruments/{id}) and the tokenized nature of the resource, but says nothing about auth requirements, error behavior for unknown ids, or rate limits – the annotation carries most of the safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.