Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden; it does disclose the operational precondition that AC must be stopped and the source of the data being restored, which is genuinely useful. However, it never says whether restoration overwrites current configs, whether it is reversible, or what happens if no backup is present — the main risk questions for a mutation tool remain unanswered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.