Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-read-only, non-idempotent, non-destructive, closed-world, and the description adds substantial behavior beyond them: duplicate_studio failure semantics, that the key is displayed only once, and that no key recovery exists. This is strong disclosure, though the exact return payload shape is left to the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.