Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint=true annotation already establishes the safe-read profile, so the description's job is lighter. It adds the id prefix convention and the underlying HTTP endpoint, but says nothing about auth requirements, error behavior for an unknown id, or response shape. With annotations covering the safety profile, this is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.