Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden. It does not say whether the operation is read-only, whether it requires an authenticated/confirmed session, whether results are paginated or scoped to the caller, or how failures behave — beyond a vague nod to confirmation state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.