Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses that the operation is scoped to the token's access, but it doesn't explicitly state that it's read-only, nor does it mention return format or pagination. The verb 'List' implies a safe read, but the description is minimal and doesn't add significant behavioral context beyond that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.