Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, destructiveHint=false, openWorldHint=true), the description discloses invite lifetime (7 days), resend semantics, authorization and plan requirements, and the idempotency contract (same key returns the first answer and does not act again). These are the exact behavioral details an agent needs before invoking a mutating, email-sending tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.