Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses the full lifecycle: nothing is sent and no seat is consumed until the owner confirms on the website, the owner is normally emailed, and repeat calls return the open request (reinforcing idempotentHint). It also adds authorization and plan constraints that the annotations do not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.