Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only indicate readOnlyHint=false and destructiveHint=false, so the description carries the behavioral burden. It adds that no OTP is involved, returns org_id + zsc_ key immediately, requires secure key storage, and is rate-limited. Minor gaps remain around idempotency or retry behavior, but they are not critical for a one-parameter create.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.