Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description must carry the full behavioral burden, and it does disclose ordering and per-user scoping. However, it omits material behavior: whether annulled invoices are included by default (the estado enum implies yes), that results are capped by a default limit of 20 (max 100), and that this is a read-only operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.