Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the generic hint flags (readOnlyHint=false, destructiveHint=false, idempotentHint=false), while the description adds real behavioral context: signing, no cart/order creation, no payment or authentication, customer-side action required, and a 10-item cap. It does not say whether the link expires or whether repeated calls yield the same link, which is the main remaining gap for a non-idempotent tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.