Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, non-idempotent, non-destructive, closed-world, so the bar is lower; the description still adds value by disclosing membership side effects and that the returned 'identity receipt' is bounded rather than a full object. It does not mention that duplicate slugs fail with 409 SLUG_TAKEN (that lives only in the schema), but the ownership behavior is the key addition.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.