Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that it creates a cryptographically signed credential with enforced segment permissions and spend limits, which is the core behavior. However, it does not mention prerequisites (e.g., whether the principal must be authenticated), side effects like persistence or costs, or failure modes. The description is not contradictory but lacks depth beyond the basic action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.