Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must fully disclose behavior. It only states 'get' with no mention of return format, whether messages are cleared, session requirements, or read-only guarantees. While 'get' implies a non-destructive read, the description does not explicitly convey any behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.