Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are minimal (readOnlyHint=false, destructiveHint=false, etc.), so the description carries the burden of behavior. It discloses key behaviors: tokens fall back to defaults, empty issuerName uses workspace name, logoUrl format restrictions, and detailed composition rules for layout/order/freeform. This goes beyond the schema and is highly informative. It does not mention the return format, but an output schema exists, so that gap is acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.