Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose meaningful behavior: the required platform session context, the exact role set that qualifies as 'staff', and the provenance of bootstrap owners (server config, not revocable via this surface). The last point usefully signals this tool is a read/list surface and that revocation lives elsewhere. It does not confirm read-only status or return shape, keeping it below 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.