@DavidVettuchirayil said:

Under the V3 documentation: Guides > Authentication > Guest Sessions it says "They have limited permissions as they can only rate a movie, TV show and TV episode. " but under: API Reference > Authentication > Create Guest Session it says "For example, some of the things you can do with a guest session are; maintain a rated list, a watchlist and a favourite list." So do guest sessions have list functionalities? I've seen mentions of possibly adding the functionality in past questions but I never saw a definite answer.

Guest sessions indeed only support rating things right now. I'll have to get that copy updated.

Also, do generated guest sessions appear under the API > Sessions tab in the settings? I'm utilizing a Java wrapper from https://github.com/c-eg/themoviedbapi and I do seems to be getting them using the .getGuestSessionToken() method from their TmdbAuthentication.java class as I can print them out, but I would like to know if there's somewhere I can manage them or not if they are actually being created through this way.

No, they do not.

When trying to create a list using a guest session, I end up with *ResponseStatus{code=3, message=Authentication failed: You do not have permissions to access the service.} * while testing this snippet:

TmdbApi tmdbApi = new TmdbApi(apiKey);
TmdbAuthentication tmdbAuthentication = tmdbApi.getAuthentication();
TmdbAccount tmdbAccount = tmdbApi.getAccount();
TmdbLists tmdbLists = tmdbApi.getLists();

TokenSession guestSessionToken = tmdbAuthentication.getGuestSessionToken();
String guestSessionTokenId = guestSessionToken.getGuestSessionId(); //prints the same result as sessionToken
SessionToken sessionToken = new SessionToken(guestSessionTokenId); //prints the same result as guestSessionTokenId

tmdbLists.createList(sessionToken, "Test Name", "Test Description");

Then I try rating a movie and I end up with the same response above when using:

tmdbAccount.postMovieRating(sessionToken, 1011985, 6);

I can't help much when you're using a wrapper around the calls since I have no idea what is actually being called and sent. If you can repeat these steps as plain HTTP calls, I can see if there's anything I notice that can help with.