Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations mark it as a non-read, non-idempotent, non-destructive mutation, and the description usefully adds that transitions are validated, results are returned per-operation, and nothing is published here. The per-operation result contract and the 'draft only' guarantee are genuine additions beyond the annotations, though reversibility and failure semantics of a partially-applied batch are unstated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.