Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive behavior, so the description's real contribution is the disclosure that the result includes the store address and admin login but never the key or login token, plus the existence of a 'needs support' terminal state. That is meaningful security and outcome context beyond the structured fields, though it says nothing about error cases or expiry of the token.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.