Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses the one-time visibility of the secret, the per-account quota of 10, and the non-obvious behavior of test keys (sends accepted and stored, never delivered, no allowance consumed). It omits what happens when the quota is exceeded and whether the live key requires prior verification.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.