Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds two useful facts beyond that: the offer must be a draft, and the supplied list is a complete ordering rather than a partial patch — implying replace-wholesale semantics. It still says nothing about whether omission of a document drops it, or about revision-conflict behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.