Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so safety is covered structurally. The description does add one genuine behavioral disclosure beyond annotations: that only names are returned and API keys are never exposed, which is useful. Beyond that privacy note it says nothing about mutation, auth, or result size.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.