Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden and does so thoroughly. It explains the keyless signing flow, that calls without an envelope return action_required='sign_envelopes', how to sign and re-call, the 307-redirect to GCS, that bytes never transit the MCP server, and that one file per call is allowed in envelope mode.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.