Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions that certificates are 'earned' and includes 'public verification URLs,' which implies read-only access to user-specific data. However, it doesn't address key behavioral aspects like authentication requirements, rate limits, error conditions, or whether the list is paginated/sorted. For a tool with zero annotation coverage, this leaves significant gaps in understanding how it behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.