Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare destructiveHint=true and idempotentHint=true, but the description adds valuable behavior beyond them: revoked credentials and provisioner tokens remain revoked, and instances can be re-enrolled. This clarifies what restore does not recover, which is important for an agent reasoning about side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.