Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnly/idempotent/non-destructive, so the safety profile is covered. The description does add genuine value beyond the annotations by disclosing that unauthorized related fields are masked, which is important behavioral context. However, it says nothing about not-found handling or permissions requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.