Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations at all, the description carries the full burden. It discloses that only 'authorised' tools can be called and that a lean response budget applies, plus gates broad nested responses behind allow_broad_response. However, since this proxy can invoke any tool including mutating ones, the absence of any statement about side effects, reversibility, or error behavior is a meaningful gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.