Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), so the bar is lower. The description still adds real behavior context: no invitations are sent as a side effect, email addresses are withheld from the payload, and the returned IDs are meant to be reused as assignees. It does not mention pagination behavior in prose, but the schema covers that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.