Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as a non-read-only, non-idempotent, non-destructive write. The description adds genuinely useful behavior beyond that: the auth requirement (sp_ key), the 90-day retention window, and the plan-dependent outcome where paid-plan drops never expire again after restore. It stops short of describing failure modes when files are no longer retained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.