Welcome back to the Auth0 Community and sorry for the late reply.
You can use the NewDevice property from the event.authentication object in a Post-Login Action to determine if the user is logging in from a new Device or not, then prompt the user for MFA or not.
You can check out the MFA Required Only if Logging in With New Device Knowledge Article that provides more details.
Hope this helps!
Thanks,
Remus