Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and no output schema, the description carries the full disclosure burden. It usefully enumerates what is returned and implicitly signals a read of the caller's own session, but never states that the call is read-only, side-effect free, or what happens if no user is authenticated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.