Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With zero annotations the description carries the full burden, and it does disclose the key behavioral traits: only GET traffic is issued, no mutating verb is ever retried, and an unresolved create remains flagged uncertain rather than assumed successful. That is unusually strong safety disclosure for this dataset. It still omits auth/permission requirements, rate or scope limits on the GETs, and when the operation is considered finished.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.