docs: Add LLM API key setup to QUICKSTART and fix README model config

- QUICKSTART Step 3 now documents LLM API key configuration as a
  required step, with primary vs fallback provider explanation
- Fix README model config snippet: "fallback"/"fast" → "fallbacks"
  array to match actual openclaw.json schema
- Clarify that only the primary provider key is strictly required
- Fix stale version 2.3.0 → 2.4.3 in QUICKSTART health check example

Author: alokemajumder

README.md

@@ -189,8 +189,10 @@ Model format is `"provider/model-name"`. Example `openclaw.json` snippet:
 {
   "model": {
     "primary": "anthropic/claude-sonnet-4-5",
-    "fallback": "openai/gpt-4o",
-    "fast": "groq/llama-3.3-70b-versatile"
+    "fallbacks": [
+      "openai/gpt-4o",
+      "groq/llama-3.3-70b-versatile"
+    ]
   }
 }
 ```
@@ -224,12 +226,17 @@ Use hosted LLM providers (Anthropic, OpenAI, Groq, Google, Mistral, xAI, OpenRou
 | **Guide** | [Quick Start](#quick-start) below → configure API keys → start services |
 
 ```bash
-# Example: Claude + Groq fallback
 # In /etc/wazuh-autopilot/.env:
+# Primary provider (required — matches openclaw.json default)
 ANTHROPIC_API_KEY=sk-ant-...
+
+# Fallback providers (optional — used when primary is unavailable)
+OPENAI_API_KEY=sk-...
 GROQ_API_KEY=gsk-...
 ```
 
+> Only the primary provider's API key is strictly required. The default `openclaw.json` uses `anthropic/claude-sonnet-4-5` as primary. If you change the primary model, set the corresponding provider's key.
+
 ### Path B: Local LLMs with Ollama (Air-Gapped)
 
 > **Status: Functional with known limitations. Proceed with care.**

docs/QUICKSTART.md

@@ -54,7 +54,22 @@ Edit the configuration file:
 sudo nano /etc/wazuh-autopilot/.env
 ```
 
-**Required settings:**
+**Required — LLM API Keys:**
+
+At minimum, set the API key for your primary LLM provider. The default config uses Anthropic as primary with OpenAI and Groq as fallbacks:
+
+```bash
+# Primary provider (required) — get key at https://console.anthropic.com/
+ANTHROPIC_API_KEY=sk-ant-...
+
+# Fallback providers (optional but recommended for resilience)
+OPENAI_API_KEY=sk-...       # https://platform.openai.com/
+GROQ_API_KEY=gsk-...        # https://console.groq.com/
+```
+
+> **Note**: Only the primary provider key is strictly required. Fallback providers are used when the primary is unavailable or rate-limited. If you customize `openclaw.json` to use a different primary (e.g., `openai/gpt-4o`), set that provider's key instead.
+
+**Required — MCP Server Connection:**
 
 ```bash
 # MCP Server Connection
@@ -125,7 +140,7 @@ Expected response:
 ```json
 {
   "status": "healthy",
-  "version": "2.3.0",
+  "version": "2.4.3",
   "mode": "bootstrap"
 }
 ```