Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=true). The description adds useful behavioral context: this tool returns a payment link, and the actual payment flow continues by POSTing to paymentLink to receive an HTTP 402 challenge. It does not cover auth needs or rate limits, but it goes beyond what the annotations state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.