Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly=true, destructive=false, idempotent=false, openWorld=true, so the safety profile is covered. The description adds genuinely new context the annotations cannot convey: the BYOK credential model ('transit in-memory only, never stored') and the fact that descriptions are transformed to Markdown on return. It stops short of covering error behavior for invalid keys or missing permissions, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.