Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, and the "[READ]" prefix merely repeats that signal rather than adding context. The description says nothing about what "settings" comprise, whether the call fails for unknown policy_ids, or what shape the response takes, leaving the behavioral burden entirely on annotations and schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.