Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and idempotentHint=true, but the description adds what they cannot: ownership transfer to the earliest remaining member, cascading team deletion for the last member, and a named refusal code with a remediation path. That is exactly the extra context an agent needs before committing to a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.