Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already discloses the safe read-only nature, so the description adds minimal extra behavioral context beyond scoping to the Certificate Manager account. It does not contradict the annotation, but it also does not disclose potential behaviors like pagination, result size limits, or empty-list behavior. This is adequate for a simple read-only list tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.