Does Cisco's cloud email security have the ability to search for a given MD5 to determine if it has seen it before?  In addition, can you upload an MD5 or an email and determine if it malicious without having it in an email inbox?

Does Firepower have the ability to query the Firepower API for an MD5 to see if FP has seen it before? Does Firepower have the ability to block a given MD5 via the API?   

Is there a way to initiate an endpoint scan with Cisco AMP from the API?