Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial behavior beyond the annotations: idempotency ('Already-present membership stays present'), input validation outcomes ('Wrong kinds or cross-Account IDs are refused'), an access requirement, an explicit non-effect ('launches no Scan'), and a 1–100 ID cap. This is exactly the kind of context annotations (readOnlyHint=false, destructiveHint=false) cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.