Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden but only gestures at it via "safe project name" without defining what makes a name safe, whether the call fails on an existing name, what permissions are required, or what is returned. The mutation semantics of workspace creation remain opaque.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.