Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so safety is covered; the description adds genuinely non-obvious behavior: rows are account/region-level and 'surface tenant-wide for any key', plus snapshot_date meaning 'when a row was last refreshed'. That scoping caveat materially affects how results should be interpreted, though nothing is said about rate limits or result size.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.