Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the write profile (readOnly=false, idempotent=false, destructive=false), yet the description adds real substance: the version is immutable and appended (prior versions survive), activation flips the live version, and the receipt is bounded. It also notes that 'why' is accepted but not recorded, which is genuinely non-obvious. Missing: permissions required and any archive size limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.