diff --git a/docs/web-ui/dashboard.md b/docs/web-ui/dashboard.md
index a6ec9f87..da8a20bf 100644
--- a/docs/web-ui/dashboard.md
+++ b/docs/web-ui/dashboard.md
@@ -805,19 +805,25 @@ that's a browser-level decision, not ours.
 - `POST /retry-reminder/{id}` — re-arm a reminder whose delivery
   failed (clears the failure state so the scheduler retries).
 - `GET /api/tool-groups` — returns `{ groups: Vec<String>,
-  assignments: BTreeMap<String, Vec<String>> }`. `groups` is the
+  assignments: BTreeMap<String, Vec<String>>,
+  descriptions: BTreeMap<String, String> }`. `groups` is the
   ordered list of all known tool-group names (drives the column
   headers in the P3RM1SS10NS tab); `assignments` is the per-agent
-  override map (absent agents use the role default).
+  override map (absent agents use the role default); `descriptions`
+  maps each group name to a short human-readable string surfaced as
+  a column-header tooltip on hover.
 - `POST /api/tool-groups/{agent}` — body `{ groups: ["name", …] }`.
   Writes the tool-group set for `{agent}` to
   `/var/lib/hyperhive/meta/tool-groups.json` and queues a rebuild so
   `HIVE_TOOL_GROUPS` takes effect. Agent name validated;
   `guard_agent_name` applied.
 - `GET /api/capabilities` — returns `{ caps: Vec<String>,
-  assignments: BTreeMap<String, Vec<String>> }`. `caps` is the
+  assignments: BTreeMap<String, Vec<String>>,
+  descriptions: BTreeMap<String, String> }`. `caps` is the
   ordered list of all known capability names; `assignments` is the
-  per-agent grant map (absent agents have no extra capabilities).
+  per-agent grant map (absent agents have no extra capabilities);
+  `descriptions` maps each capability name to a short human-readable
+  string surfaced as a column-header tooltip on hover.
 - `POST /api/capabilities/{agent}` — body `{ caps: ["name", …] }`.
   Writes the capability set for `{agent}` to
   `/var/lib/hyperhive/meta/capabilities.json` and queues a rebuild so