Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses that the auth identity returned is masked (脱敏) and that RTT/Region are surfaced, implying a read-only probe, but it never states that the call is non-destructive, side-effect free, or requires no permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.