Do I need my workspace admin to approve this?
It depends on your workspace. Creating an app and installing it to a workspace can require admin approval on some Slack plans, and on others any member can do it. The app itself is yours, asks for three scopes, and isn't a Khint-owned app: nothing is shared with us.
Why does Search messages need a different token?
Because Slack doesn't expose message search to bot tokens at all. It's a user-token API. If you want that row, paste a user token (xoxp-) instead of the bot token (xoxb-). Posting and the two pull rows work with either.
Does Khint read my Slack in the background?
No. It calls Slack only when you press a row. There's no event subscription, no polling and no copy of your workspace anywhere: what a pull brings back lands in your local Memory session, which never syncs.
What does posting cost?
The Slack call is free. If the row hands your text to an agent to rewrite it into an update first, that's one normal agent run against your monthly credits. Posting a selection as-is, and every pull, cost nothing.
Can one press write to Slack and Jira at the same time?
Yes. A workflow's parallel step takes two to four destinations and dispatches them concurrently from the same running text, so a single press can file the ticket, publish the page and post to the channel. Branches are best-effort: the ones that succeeded stay, because a landed message can't be un-sent.