Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say non-read-only, non-idempotent, destructive and open-world; the description adds real behavioral facts the agent could not infer: per-address hourly throttling, refusal when an invitation is already queued, no seat changes, and an auth/plan gate limited to owner API keys, connected apps and team-seat plans. This exceeds the annotation baseline rather than restating it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.