Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden, and it does little beyond the bare statement that it reads data. It does not state that the operation is read-only and side-effect free, nor whether the catalogue is static, filtered, or permission-dependent. The only behavioral hint is the shape of the returned content (actions, parameters, plan format), which is thin.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.