Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, it discloses the return form (PDF attachment), the non-error failure mode when no invoice exists, and a concrete auth behavior — an unauthenticated call triggers a sign-in prompt on printdash.io. These are exactly the operational traits an agent cannot infer from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.