Answer
Although GAP concerns itself with with discovery and connecting the GAP service is in fact a mandatory GATT service that every device must include in its GATT server. The GAP service requires no security permissions and is read only. It contains the device name characteristic, the appearance characteristic and the peripheral preferred connection parameters characteristic and is read only.