Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, idempotentHint=true and readOnlyHint=false, so safety is partly covered. The description adds value beyond them by disclosing the optimistic-concurrency guard (matching expectedVersion), the confirmation guard, and the important non-effects (PDF, quote and order are untouched) – exactly the kind of blast-radius detail an agent needs before a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.