Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the safety profile is covered structurally. The description reinforces read-only scope ('this server never issues refunds') and adds the endpoint, but nothing about the return shape, pagination, or behavior on an unknown id. The 'POST' mention alongside a read-only operation is transport detail, not a contradiction of the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.