Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructive=true and idempotent=false, so the safety profile is covered; the description still adds real context: the auth scope, that edits are persisted immediately like update_draft, that rule-based checks run synchronously while a full check runs in the background, and that publishing is out of scope. It could go further on whether the apply is reversible, which matters given destructiveHint=true.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.