Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. 'Retrieve information' implies a read, but it does not disclose the critical question for an API-key resource — whether the secret key material is returned in full, masked, or omitted — nor any permission requirements or not-found behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.