Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true and destructiveHint=false, so the agent already knows this is safe. The description adds the context that it validates credentials against the source system (implying an external network call), which is somewhat useful. However, it doesn't disclose whether this is an expensive/slow operation, whether it may fail due to connectivity, or what happens for invalid credentials.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.