Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnly=false, idempotent=true, destructive=false), the description discloses that the tool returns a cart link and that checkout/payment happen securely on the storefront, so the agent knows it is not processing payment. It does not describe cart persistence or repeated-call behavior, but annotations already cover safety and idempotency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.