Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe read. The description goes further by naming the returned fields (contact details, first/last seen, visit counts, custom fields, tags) and the underlying endpoint, which is real value given there is no output schema. It still says nothing about auth scoping or error behavior when the id is unknown.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.