Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well past the annotations: it explains that create batches delete surviving rows while update batches restore prior field values, that fields changed since the batch are reported as conflicts and left intact, that side effects of fired workflows are NOT reverted, and that the call is single-use inside a 7-day window. That is exactly the destructive/reversibility context an agent needs. The 'once' limit sits slightly awkwardly against idempotentHint=true, but the state outcome is consistent, so this is a nuance rather than a contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.