Hello dheberlee,
You can use the API to find the devices with AMP enabled.
Going through the API docs on the dashboard, you will see the API call "Malware Settings". You can use this to identify if that device has AMP enable or not. The output using postman should look like this.
