Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, non-destructive, non-idempotent, closed-world. The description adds real value beyond them: the visibility consequence of a draft (nobody can see or apply until the member publishes in the dashboard) and the response payload (job with job_id and version). It does not state that repeated calls create separate jobs, which is the main behavioral gap for a non-idempotent create.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.