Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so the safety profile is covered. The description adds real value by disclosing the default read source and explicitly bounding scope ('No invoice retrieval'), but it says nothing about what the returned setup contains or freshness/auth requirements beyond the ledger/live distinction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.