Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. "GET" implies a safe read and "Explicit company required" flags a hard constraint, and "Flat query fields" hints at query shape, but there is nothing about auth scope, pagination, rate limits, or what "policies" actually contains. For an unannotated tool this is well short of adequate disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.