Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, idempotent, non-destructive behavior, so the safety profile is covered. The description adds the meaningful disclosure that the same call can both add and remove, driven by direction rather than separate tools. It says nothing about failure cases (unknown ID, ownership) or what state is returned after the toggle.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.