Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden but discloses minimal behavioral traits. While 'configured' and 'available to this MCP server' hints at access scope, it fails to clarify read-only safety, pagination behavior, error cases, or the return structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.