Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already establishes this is a safe read, so the description only needs to add context. It does add useful content by naming what comes back (track metadata, provenance hash, EU AI Act compliance status, on-chain anchor info), but says nothing about error behavior when a credential_id does not exist or whether results are cached/live.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.