diff --git a/pkgs/development/python-modules/nitrokey/default.nix b/pkgs/development/python-modules/nitrokey/default.nix
new file mode 100644
index 000000000000..fa22c3e35574
--- /dev/null
+++ b/pkgs/development/python-modules/nitrokey/default.nix
@@ -0,0 +1,61 @@
+{
+  lib,
+  buildPythonPackage,
+  pythonOlder,
+  fetchPypi,
+  poetry-core,
+  cryptography,
+  fido2,
+  requests,
+  tlv8,
+  pyserial,
+  protobuf5,
+  semver,
+  crcmod,
+  hidapi,
+  ecdsa,
+}:
+
+buildPythonPackage rec {
+  pname = "nitrokey";
+  version = "0.2.0";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-oWfhy7Mj1UnrC70G7fpkl4q4uG0CdvO0BHwfJYszR30=";
+  };
+
+  disabled = pythonOlder "3.9";
+
+  build-system = [ poetry-core ];
+
+  dependencies = [
+    fido2
+    requests
+    semver
+    tlv8
+    crcmod
+    cryptography
+    hidapi
+    ecdsa
+    protobuf5
+    pyserial
+  ];
+
+  # no tests
+  doCheck = false;
+
+  pythonImportsCheck = [ "nitrokey" ];
+
+  meta = with lib; {
+    description = "Python SDK for Nitrokey devices";
+    homepage = "https://github.com/Nitrokey/nitrokey-sdk-py";
+    changelog = "https://github.com/Nitrokey/nitrokey-sdk-py/releases/tag/v${version}";
+    license = with licenses; [
+      asl20
+      mit
+    ];
+    maintainers = with maintainers; [ panicgh ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 456d25560b33..d7b23e5f74fe 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -8941,6 +8941,8 @@ self: super: with self; {
 
   nitransforms = callPackage ../development/python-modules/nitransforms { };
 
+  nitrokey = callPackage ../development/python-modules/nitrokey { };
+
   niworkflows = callPackage ../development/python-modules/niworkflows { };
 
   nix-kernel = callPackage ../development/python-modules/nix-kernel {