Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and openWorldHint=true, so the agent knows this is a non-destructive mutation that reaches outside the system. The description adds a useful state constraint ('pending registration invite' and that an email is sent), but says nothing about required permissions, what happens if no pending invite exists, rate limits, or whether a new token replaces the old one.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.