Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint=false and openWorldHint=true; the description adds substantial context beyond them: management-permission requirement, outbound messaging side effect, per-person SENT/ALREADY_SENT/FAILED return codes, the instruction not to resend a whole batch on partial failure, and the caveat that delivery ≠ acceptance/registration. This is rich behavioral disclosure for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.