diff --git a/pkgs/development/python-modules/safehttpx/default.nix b/pkgs/development/python-modules/safehttpx/default.nix
new file mode 100644
index 000000000000..d7a9fd27b514
--- /dev/null
+++ b/pkgs/development/python-modules/safehttpx/default.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  hatchling,
+  httpx,
+  pythonOlder,
+}:
+
+buildPythonPackage rec {
+  pname = "safehttpx";
+  version = "0.1.6";
+  pyproject = true;
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-s1a/yCzuOiTDlblKLb6rvtYK/xql+jtf6XxPJFbrzkI=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    httpx
+  ];
+
+  pythonImportsCheck = [ "safehttpx" ];
+
+  doCheck = false; # require network access
+
+  meta = {
+    description = "SSRF-safe wrapper around httpx";
+    homepage = "https://github.com/gradio-app/safehttpx";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fliegendewurst ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index abac140b6209..68171aa555df 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -14359,6 +14359,8 @@ self: super: with self; {
 
   safe-pysha3 = callPackage ../development/python-modules/safe-pysha3 { };
 
+  safehttpx = callPackage ../development/python-modules/safehttpx { };
+
   safeio = callPackage ../development/python-modules/safeio { };
 
   safetensors = callPackage ../development/python-modules/safetensors { };