Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: the invitation is queued and paced rather than sent immediately, scheduled_for reports the due time, repeat calls are deduplicated, already-connected or already-invited targets silently skip, and no note is attached by design. This is consistent with idempotentHint=true, destructiveHint=false, and readOnlyHint=false, and it discloses the async queue semantics an agent could not otherwise infer.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.