Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden, and 'Read-only' is its only disclosure — useful but minimal. It says nothing about permission requirements, behavior for an unknown or archived id, payload size, or whether 'today's sends' is computed live versus cached, which matters for a supposedly comprehensive snapshot.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.