Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare non-readOnly, non-destructive, open-world, non-idempotent. The description usefully adds what the annotations cannot: nothing is charged at generation time, payment happens later in the user's browser, and a user-intent gate applies. It does not warn that repeated calls produce distinct links, which is the one behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.