Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and non-idempotency, so the bar is lower, yet the description still adds real context: admin-only authorization, plan eligibility (Free and Pro), the workspace-scoped nature of reject, and the billing consequence of 'add' (an extra location is billed). It also warns that quotedMaterial text is evidence rather than instructions, protecting against injection-driven calls. It does not explain what state changes persist or what the response contains, so it stops short of 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.