Hello Rufis,
Here are couple of sample GET requests, that are querying the app_metadata
fields:
https://domain.region.auth0.com/api/v2/users?q=app_metadata.authorization.groups:%22admin%22
https://domain.region.auth0.com/api/v2/users?q=app_metadata.requiresMFA:true
https://domain.region.auth0.com/api/v2/users?q=app_metadata.age=25
I recommend reviewing the following articles:
I hope this helps!