diff --git a/spark_executor/server.py b/spark_executor/server.py
index dc7510d..377e66f 100644
--- a/spark_executor/server.py
+++ b/spark_executor/server.py
@@ -426,10 +426,17 @@ def _list_connections(_req: EmptyRequest = EmptyRequest()):
     operation_id="get_connection",
     summary="Get a single connection by name",
     description=(
-        "Return the Connection record, or 404 if not found. Useful to "
-        "verify a connection was saved correctly, or to inspect the "
-        "resolved yarn_rm_url / auth_type before submitting a job or "
-        "calling one of the get_external_* tools."
+        "Return the full Connection record, or 404 if not found. **Call this "
+        "whenever you need any cluster-level config** — common lookups: "
+        "yarn_rm_url (YARN RM endpoint), history_server_url (Spark History "
+        "Server), url_allowlist (which hosts fetch_url may access), "
+        "auth_type / auth_user / ssl_verify (for any YARN REST or HTTP call), "
+        "master / deploy_mode / spark_conf (for prepare_submit_job).\n\n"
+        "The response is a full Pydantic model dump — all fields including "
+        "secrets (auth_password, auth_keytab). Treat it as sensitive. "
+        "Useful to verify a connection was saved correctly, or to discover "
+        "the right endpoint to call before invoking get_external_*, "
+        "fetch_url, or list_applications."
     ),
 )
 def _get_connection(req: ConnectionNameRequest):