Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
'Atomic' is genuinely useful and goes beyond the annotations. However, the description says nothing about what a full restore overwrites, whether existing attachments/data are replaced or merged, what auth or confirmation is required, or how the source backup is supplied. This matters doubly because destructiveHint=false understates an operation that replaces the whole database, so the description is the only place a warning could have lived.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.