list_guest_collections.py seems to work fine when I use client credentials for a new client identity that I've assigned the admin role for the endpoint. However, when doing a test configuring the script to use the client identity used to create the endpoint, I see this when running the script:
ValueError: Attempting get new access token for client credentials authorizer didn't return exactly one token. Ensure scopes urn:globus:auth:scope:8aaa63ed-8ad6-4fe1-85a6-d118450a2838:manage_collections[urn:globus:auth:scope:transfer.api.globus.org:all] are for only one resource server.
If this is expected maybe we update the comments in the script to tell users to not use the client identity used to setup their endpoint. If this is not expected then maybe this is a bug to be looked into.