Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and idempotentHint=true. The description adds behavioral context by specifying what fields the response includes: 'status, type, locked, MFA flags'. This is a useful elaboration beyond the raw annotations, letting the agent know the breadth of data returned. No description of rate limits or auth is given, but for a simple read operation the annotations suffice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.