Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden, and it does add real value: it enumerates the returned facets (provider, default, mode, test numbers, ring window, live health, inbound answering, telco warning) and gives an explicit security guarantee that secrets are never returned. It stops short of stating that the operation is read-only or permission-gated, but "List" and the field inventory make the behavior reasonably clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.