Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden and does so well: read-only, writes/signs/executes nothing, fail-closed status semantics (OK/REFUSED/UNAVAILABLE, never made-up data), tenant comes from the setting never an argument, and a scope disclaimer that a readout is not a compliance finding. The only omission is what determines current vs unbound, which the agent must infer from the supplied inputs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.