Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already establish readOnlyHint=true and destructiveHint=false, so safety need not be restated. The description adds real value beyond them: it discloses the permission-scoping behavior of the entire API surface and the underlying implementation path (GET /civicrm/authx/id, then APIv4 Contact.get), which explains latency and the openWorldHint. It could say more about failure modes when the key is unauthenticated or expired.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.