Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and 'Read-only' is a genuine, useful disclosure about the operation's safety profile. However, it says nothing about permissions, error behavior when the ID doesn't exist, or any rate considerations, leaving substantial gaps for an un-annotated tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.