Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate the operation is not read-only, not idempotent, and not destructive. The description adds the 'token-auth' detail and the target scope, but it does not disclose side effects (e.g., whether the invitation is sent via channel or just stored), possible rate limits, or authentication requirements beyond token generation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.