Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does notably well: it declares 'Read-only; sends nothing,' which establishes it is a safe, side-effect-free read, and flags the free API key requirement. It stops short of disclosing rate limits, whether the report is computed fresh or cached, or what a free-tier response looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.