Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false with destructiveHint=false and openWorldHint=false, and nothing in the description contradicts that. The description adds that this is a private, connection-card-internal operation, which is useful behavioral framing, but it doesn't disclose what state the restore mutates or what the resume_token is bound to.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.