Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, so safety is covered. The description adds genuine context beyond that: the built-in defaults per notification type, that per-workspace changes are reported on top of those defaults, the tellPerson fallback behavior, and that workspace rows are marked isDefault. It doesn't mention authorization requirements, but for a read-only settings fetch that's a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.