Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (not read-only, not idempotent, not destructive), and the description adds a genuinely non-derivable behavior: the secret is returned only once and cannot be retrieved again. The instruction to tell the user to store it securely is actionable operational context. It does not mention rate limits or whether creating a key revokes prior keys, but for a short tool this is strong disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.