Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the description does not need to argue safety. It instead adds genuinely non-obvious behavior: revoked keys are included in the listing, secret values are never returned, and results carry a prefix plus an is_this_key flag identifying the credential being used. The only gap is that magnitude, ordering, or pagination of the key list is not mentioned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.