Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the behavioral burden. The verb 'list' signals a read-only operation, but the description does not add context about whether authentication is required, whether the list is static or dynamic, or what the output structure looks like. It is minimally transparent but lacks depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.