Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does substantial work: it declares read-only/no-side-effect behavior, names the three required environment settings, and states that the tenant comes from configuration rather than an argument. It also describes the OK/REFUSED/UNAVAILABLE outcome model and that failures surface as UNAVAILABLE rather than fabricated data, though it omits rate limits and what the supplied records are used for beyond replay.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.