Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this is a non-read-only, non-destructive write. The description adds genuinely useful behavior beyond that: the key is "shown only once," flagging that the value is unrecoverable if not captured. It does not mention rate limits, name-collision handling, or any auth prerequisite, so it stops short of full disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.