Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and no output schema, the description carries the full burden, and it does disclose the exact return shape (key, label, type, required, help text, allowed options). It does not explicitly state the operation is side-effect-free or that it needs no authentication, but the read-only nature is evident from the content described.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.