When Email MFA is enabled, users who verify their email automatically get that factor added to their user profile in the Auth0 dashboard. If the Management API’s authentications method endpoint is called for this user, the ‘email’ MFA factor is not included. This factor only gets included if ‘email’ is explicitly added to their MFA factors. Is there a different endpoint to see if the user has the ‘email’ MFA factor enrolled when it was added implicitly?
It is by design that the ‘authentication-methods’ endpoint does not return auto-enrolled MFA factors such as Email.
If your project would benefit from this functionality, please open a Feature Request on the Auth0 Community Site for the Product team to review.