Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description must disclose behavioral traits. It only states that invoices are listed and that status filtering is possible. It does not mention pagination (though page_size parameter exists), ordering, authentication needs, or that it is a read-only operation. The presence of an output schema partially compensates, but overall transparency is low.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.