Can I request fixlet to be installed on user machine via a api call?

You mentioned Qualys, if you have LifeCycle there is a BigFix integration with Qualys (and Tenable) which would allow you to take actions based on vulnerabilites identified in Qualys.