Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It does disclose what the response contains (connection state, consentId, intercepted headers), which implies a read-only inspection with no side effects, but it never states that explicitly and gives no indication of what happens when no session exists or what the header data means.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.