diff --git a/website/src/actions/index.ts b/website/src/actions/index.ts
new file mode 100644
index 0000000..8f55443
--- /dev/null
+++ b/website/src/actions/index.ts
@@ -0,0 +1,6 @@
+import otp from "./otp/otp";
+import sendmail from "./sendmail";
+
+export const server = {
+  sendmail,
+};
diff --git a/website/src/actions/sendmail.ts b/website/src/actions/sendmail.ts
new file mode 100644
index 0000000..3b2d242
--- /dev/null
+++ b/website/src/actions/sendmail.ts
@@ -0,0 +1,78 @@
+import { z } from "astro/zod";
+import { actions, defineAction } from "astro:actions";
+import nodemailer from "nodemailer";
+import { MAX_DAILY_EMAILS, SENDMAIL_BIN } from "astro:env/server";
+import { and, db, eq, gte, lte, SendmailToken, SentEmails } from "astro:db";
+import { isToken } from "typescript";
+
+export default defineAction({
+  input: z.object({
+    email: z.string().email(),
+    message: z.string().nonempty(),
+    name: z.string().nonempty(),
+    userId: z.string().nonempty(),
+    token: z.string().nonempty(),
+  }),
+  handler: sendmail,
+});
+
+type SendEmailParams = {
+  email: string;
+  message: string;
+  name: string;
+  token: string;
+  userId: string;
+};
+
+async function sendmail({
+  name,
+  email,
+  message,
+  token,
+  userId,
+}: SendEmailParams) {
+  const isTokenCorrect =
+    (await db.$count(
+      SendmailToken,
+      and(
+        eq(SendmailToken.userId, userId),
+        eq(SendmailToken.value, token),
+        gte(SendmailToken.validUntil, Date.now()),
+      ),
+    )) > 0;
+  if (!isTokenCorrect) {
+    return false;
+  }
+  await db
+    .delete(SendmailToken)
+    .where(
+      and(eq(SendmailToken.userId, userId), eq(SendmailToken.value, token)),
+    );
+
+  const emailsSentLast24Hours = await db.$count(
+    SentEmails,
+    gte(SentEmails.sentAt, Date.now() - 1000 * 60 * 60 * 24),
+  );
+  if (emailsSentLast24Hours > MAX_DAILY_EMAILS) {
+    throw new Error(
+      `${emailsSentLast24Hours} emails have been sent in the last 24 hours, but the max daily load is ${MAX_DAILY_EMAILS}.`,
+    );
+  }
+
+  const info = await transporter.sendMail({
+    from: `"Joe Carstairs" <me@joeac.net>`,
+    to: `"Joe Carstairs" <me@joeac.net>`,
+    subject: "joeac.net: a visitor left a message",
+    text: `${name} <${email}> sent you a message:\n\n\n${message}`,
+  });
+  await db
+    .insert(SentEmails)
+    .values({ messageId: info.messageId, sentAt: Date.now() });
+
+  console.log("Sent an email to Joe. Message ID: ", info.messageId);
+}
+
+const transporter = nodemailer.createTransport({
+  sendmail: true,
+  path: SENDMAIL_BIN,
+});