Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, openWorld, and non-destructive, and the description adds nothing behavioral beyond that—no note on what happens with an invalid/unknown ID, whether card data is cached or live, or what the response looks like. With the safety profile fully covered by annotations, the description contributes no supplementary context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.