Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/idempotent hints: it explains the inviteUrl is safe to share, that the row 'id' is what set_role and remove consume, and what 'membership' means (internal sees everything, external sees shared items only). The authorization rule is also disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.