Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden. It discloses the role requirement (ADMIN or MANAGER), which is a behavioral trait. However, it does not mention whether the operation is read-only, what happens if the email is not found, or any other behavioral details. It adds minimal but important context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.