Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description shoulders the full burden. It reveals the admin requirement, that secret keys are never shown again, that 'current' and 'scopes' are relative to the calling key, and the special 'original' key ID. It does not discuss error cases or rate limits, but coverage is strong for a read-only list operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.