Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: the auth requirement and the unauthenticated sign-in-prompt behavior, single-use single-tap link with a fifteen-minute lifetime, platform-specific behavior (Add to Apple Wallet sheet vs Save to Google Wallet, no app required), and what the pass actually contains. This is consistent with the declared idempotent=false/destructive=false hints and explains why the link cannot be reused.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.