Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, idempotentHint=false, openWorldHint=false. The description adds useful scope ('permanent', 'server-side data'), but does not clarify the staging semantics — whether calling it deletes anything, how long the staged state persists, or whether it must be paired with confirm_action. The 'permanent deletion' wording sits in mild tension with destructiveHint=false, though 'Stage' keeps it from being an outright contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.