Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only provide destructiveHint: false, so the description carries the burden. It discloses that the tool is a write operation (create) and importantly that it returns the private key, which is a critical behavioral trait for security. However, it does not mention that the private key is typically only returned once, which is common for key creation tools.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.