Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description adds meaningful behavioral detail: identifiers are masked to last four digits, full values live in a secret store, and reading full identifiers is deliberately not exposed as a tool due to transcript-leak concerns. This is valuable context an agent needs before relying on the returned data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.