How can I secure third party APIs with Auth0 and modify verified email flag?

We have integrated Shopify with auth0 using shopify multipass. There are following questions that we are looking to get help.

1 - We want to call third party APIs which are secured with Auth0 so is there any way to get Auth0 token once user is authorised .
2 - Can we modify verified_email flag with multipass?

Did anyone have a perspective on Ryada’s first question?