On the OP's MPPT controller which I ASSume is a Tracer 4210A rated current-40A ,rebranded:
Rated charge power 520w-12v, 1040w-24v; and max PV array power 1560w 12v, 3120w 24v. This is because the controller can handle three times the rated charge power for its PV power before it will fry from going over that rated charge power.
520/40 = 13v and 1040/40 = 26v so these guys are using 13v at "12v" for their ratings. Morningstar uses 13.3v ISTR.
So as Old Smokey said, they are indeed using the output power for their rating by using "charge power" 40 amps at 13v = 520w
The OP is in no danger whatever of frying his controller, and as has been stated, is not much over-panelled either, and that bit of over-panelling is a good thing like Morningstar suggests. He will have a good set-up as planned.