Or maybe all you need to do is shell out to

fleetctl query

?

for some reason I was thinking fleetctl could only run locally on the server, but it looks like it can actually be configured to talk to a remote server? I'll look into it - thanks for the good suggestion.

Yeah fleetctl lets you talk to your Fleet server from any shell (with network access to the Fleet server).