Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description shoulders the behavioral burden. It explicitly discloses the auth model ('No credential on purpose'), the authentication mechanism (the ID is the secret), and the lack of quota/cost. It does not, however, describe side effects or error behavior, so it is not fully transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.