Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the operation as idempotent and non-destructive, but the description adds precise behavioral detail: the specific error report 'not_a_member', the fact that the project remains visible workspace-wide, and that leaving a non-member project changes nothing. This goes beyond the annotations and gives the agent an accurate model of side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.