Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true and idempotentHint=true, but the description goes well beyond them: it discloses the silent nature of the action, what the blocked agent can no longer do, what is preserved (shared groups keep expense and payment updates), and that envelopes/plans/invites stop reaching you. The reversibility path is also spelled out, which is exactly the context an agent needs for a destructive, hard-to-observe operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.