Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the readOnly/non-destructive annotations by disclosing the retention rule (purgeAt is epoch ms, 30 days after deletion), what deletedBy encodes (you/person/agent with label semantics), and what canEdit gates. This is exactly the behavioral context an agent needs to decide whether restoration is still possible.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.