Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, and destructive flags, so the bar is lower, yet the description adds real context: the owner-only authorization ('as its owner') and the state transition to the resolved set of the currently served version. It stops short of describing failure modes or propagation timing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.