If anyone else comes across this problem here is the solution I'm using.
First of all I send a tradeoffer to the account logged in via Steam. Next, I use the interface DeclineTradeOffer to decline the trade with the apikey I'm trying to verify. If this interface responds with code 200, the trade is cancelled and the apikey belongs to the account logged in via Steam.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…