Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (destructive, non-idempotent, not read-only), the description adds real behavioral facts: single-use ("goes once"), a 24-hour validity window, a precondition that the proposal must still hold, and that it is applied under the person's name. What is missing is what exactly gets revoked, and what happens when the proposal is stale or expired.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.