Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=false, destructiveHint=false, idempotentHint=false, and openWorldHint=true. The description adds meaningful behavioral context: published versions are immutable ('Published versions never change'), releaseType picks the bump, and passing config publishes that config instead of the draft. This goes beyond the annotations and helps the agent understand side effects and constraints. It doesn't mention permissions or rate limits, but the schema already covers environment/workspace grants, so the description's added value is solid.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.