Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the destructiveHint/readOnlyHint annotations: it discloses that the change goes live for callers immediately, that the restore is itself saved as a new version, that unmanaged settings are left alone, and that versions published from the dashboard omit their area list so the service area is left untouched and the result reports this. The confirmation protocol is also spelled out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.