Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already declares this is a safe read operation. The description adds 'No secrets' which tells the agent that no sensitive data (like tokens or passwords) will be returned – a useful behavioral note. However, it doesn't disclose other potential behaviors like rate limits, authentication requirements, or output structure (though output schema exists). Given the annotation covers the safety profile, the description adds modest context, so a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.