Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so thoroughly: it declares read-only semantics ('writes, signs and executes nothing'), names the required environment settings, states that the tenant comes from configuration and never from an argument, and enumerates the OK/REFUSED/UNAVAILABLE outcomes with the rule that errors and missing settings are UNAVAILABLE rather than fabricated data. It also warns that the backing API must serve this view and adds an interpretive caveat that a mapping or readout is not a compliance finding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.