Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already declares this a safe read, and the description adds real value on top: it scopes the payload ('header, lines, payments') and explicitly notes 'The attachment is never requested', which tells the agent an attached document will be absent. It also exposes the underlying endpoint. No auth or rate-limit detail, but that gap is minor for a read.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.