Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations mark this as a non-read-only, open-world, non-idempotent write. The description adds genuine value beyond that: it confirms a ticket id is returned, that the content is never executed, and that links/emails/phone numbers are scrubbed and no personal data is stored. It does not warn that repeat calls create separate tickets, which is the one behavior an agent might need given idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.