Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only set readOnly/destructive/idempotent flags) by disclosing the resulting state ('requested'), the approval flow, the downstream side effect (a conversation opens and the person is notified), and the fallback branch that returns a link instead. This is rich behavioral context an agent cannot get from the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.