Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations the description carries the full burden, and it does disclose the concrete informational content an agent will receive (mock-mode flag, gateway connectivity, pending-message backlog). The query verb implies a side-effect-free read, though permissions and any side effects are never stated explicitly. For a parameterless diagnostic read this is adequate disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.