Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that without secret only id, active, and expiry are shown, and with secret more fields appear. It explicitly states 'Never returns the secret,' which is a critical behavior. It does not mention side effects (implied read-only) or error cases, but covers the main conditional behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.