Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this write as destructive, non-idempotent, and open-world. The description goes well beyond that, disclosing non-obvious behavior: it requires login + organizer role, bypasses the cross-event 7-day dedup, still honors closed-invitation and decline backoff, and demands a re-read of SENT status afterward. These are exactly the operational traits an agent cannot infer from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.