Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations establish the safety profile (not read-only, idempotent, non-destructive) and the description adds substantive behavior annotations do not: shared rooms remain usable, pending knocks are declined immediately, and the next knock is refused with a redirect hint. The one gap is failure behavior for an unknown key_ref, but the side-effect disclosure is well beyond the annotation baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.