Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing traits annotations cannot express: the link signs the user into checkout, it is single-use ('works once'), and it expires after 10 minutes. These are exactly the constraints an agent must respect to avoid handing the user a dead link, and they are consistent with the non-idempotent, non-read-only annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.