Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the transparency burden. It discloses that the account key is always masked in output, which is useful behavioral context. However, it does not explicitly state that this is a read-only operation, nor does it describe error behavior or auth requirements beyond 'bearer-owned', leaving some ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.