Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered structurally. The description adds the verification use case and the 'registered agent' scope, but says nothing about failure behavior for an unknown ID, whether keys rotate, or freshness of the returned key. That is a modest addition beyond annotations, not a rich one.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.