Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safety profile is covered, and the description adds the underlying REST endpoint (GET /customers/external_customer_id/{external_customer_id}). It does not disclose what happens when the external id is unknown (empty body vs. 404) or any rate-limit behavior, so it adds only modest context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.