Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnly=false, idempotent=false, destructive=false, but the description adds real substance beyond them: the call mints a schema plus version 1, property order is preserved verbatim and drives editor field order, and omitting publish leaves an unpublished draft. It stops short of covering failure modes such as slug collisions or permission requirements, which matters for a non-idempotent creation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.