Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and no output schema, the description carries the full burden of behavioral disclosure. It only states that the tool provides a 'detailed token allowlist,' but does not reveal whether it is a read-only operation, what format the allowlist takes, whether it requires authentication, pagination, or any side effects. This is heavily insufficient for an agent to predict tool behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.